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E. D. Solojentsev. Scenario logic and probabilistic management 
of risk in business and engineering. Pages — 391 p., Figures — 70; 
Tables - 40; Refers — 118. 

The methodological aspects of the scenario logic and probabilistic 
(LP) non-success risk management are considered, following from anal- 
ysis of connections between management and risk, personals and risk, 
and from study of risk management at stages of design, test and opera- 
tion of complex systems. 

The theoretical bases of the scenario non-success risk LP-manage- 
rnent in business and engineering are stated, including LP-calculus, LP- 
methods, and LP-theory with groups of incompatible events (GIE). Ex- 
amples of risk LP-models with logical connections Oi?, AND, NOT, 
cycles and GIE are given. Methods and algorithms for the scenario risk 
LP-managernent in problems of classification, investment and effective- 
ness are described. 

Risk LP-models and results of numerical investigations for credit 
risks, risk of frauds, security portfolio risk, risk in quality, accuracy, and 
risk in multi-state system reliability are given. A rather large number 
of new problems of estimation, analysis and management of risk are 
considered. In some problems the risk LP-models prove to be showed 
almost two times more accurate and seven times more robustness than 
other well-known models of risks. Software for risk problems based on 
LP-methods, LP-theory with GIE and cortege algebra, is described too. 

The book is intended for experts and scientists in the area of the risk 
in business and engineering, in problems of classification, investment and 
effectiveness, and students and post-graduates. 
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FOREWORD 



In the forewords to the books “Logic and probabilistic valuation of bank- 
ing risks and frauds in business” (St. Petersburg, Politechnika, 1996) 
and “Logic and probabilistic models of risk in banks, business and qual- 
ity” (St, Petersburg, Nauka, 1999) by the author of the presented book 
E. D. Solojentsev, and V, V. Karasev, V, E. Solojentsev I already wrote 
that they open new fields for application of rigorous analytical methods 
of estimation, analysis and investigation of the risk in economics and 
engineering. In those forewords I expressed the hope, which I am glad 
to express again, that the new logic and probabilistic methods of risk 
estimation will have happy fortune. 

In many respects the occurrence of this new book is stimulated by 
E. D, Solojentsev’s activity for organization of International Scientific 
Schools “Modelling and Analysis of Safety and Risk in Complex Sys- 
tems” (St. Petersburg; June 18-22, 2001; July 2-5, 2002; August 20-23, 
2003). Russian and foreign scientists and experts presented more than 
300 papers on the Schools devoted to the problems of safety and risk in 
economics and engineering. 

For many years the author worked in industry in the field of design- 
ing and testing of complex engineering systems. Now he works in an 
academic institute, where he is engaged in risk problems in engineering, 
banking and business. His achievement in the risk field were noticed by 
Universities of Germany, Japan and Switzerland, where he was invited 
for scientific collaboration. 

The experience and the knowledge allows the author to propose the 
uniform logic and probabilistic (LP) approach to the risk estimation and 
analysis both in engineering and economics, and to lay foundation for 
systematization and formation of the risk LP-theory and, as well as to 
create the scientific principles of the scenario LP-management by risk. 

The titles of author’s papers such as “the logic and probabilistic es- 
timation”, “the logic and probabilistic models”, “the logic and prob- 
abilistic approach to the risk analysis”, despite the clearness of the 
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terms separably (they are well known for many people, who are far from 
the risk analysis in engineering, economics, politics) require some expla- 
nation for their combination “logic and probabilistic”). 

Unfortunately, most of books in the field published in Russian, in- 
cluding “Mathematical encyclopedia dictionary” [M., “Soviet encyclope- 
dia”, 1988, 846 p.], avoid definition of the probabilistic logic, as a logic 
of statements, accepting a set of degrees of plausibility, that is the values 
are contained in the interval between “truth” and “false”. 

As the revolutionary break in the development of the inductive 
logic George Books paper “Mathematical analysis of the logic being 
experience of calculus of the deductive reasoning”, published in 1847, 
should be mentioned. The calculus of statements is the essence of 
mathematical logic and the new step in development of the formal logic. 

One of the fathers of the mathematical theory of the information 
Clod Elwud Shannon succeeded to close the gap between the logic al- 
gebraic theory and its practical application. In the D.Sc. dissertation 
(1938) he developed principles of the logic model of the computer, hy 
connecting Boolean algebra with the functioning of electrical circuits. 
The success of his ideas concerning connections between the binary cal- 
culus, the Boolean algebra and electrical circuits. Shannon explained as 
follows: “Simply it is happened so, that nobody else was acquainted 
with both areas simultaneously”. 

The necessity of quantitative estimation of non-failure operation of 
complex technical structures at the beginning of the 60s XX century 
stimulated the so-called logic and probabilistic calculus (LPC) 
which is a part of the mathematics treating rules of calculus and operat- 
ing with statements of two- value logic, LPC is based on the logic algebra 
and rules of replacement of logic arguments in functions of the logic al- 
gebra (FAL) by probabilities of their being true and rules of replacement 
of the logic operations by the arithmetic ones. 

In other words, with the of help of LPC it became possible to connect 
the Boolean algebra with the probability theory not only for the elemen- 
tary structures, but also for the structures, whose formalization results 
in FAL of iterated type (bridge, network, monotonous). This original 
“bridge of knowledge” includes some proven theorems, properties and 
algorithms, which constitute the mathematical basis of LPC. 

Investigation of the safety problem has resulted in development of 
the original logic and probabilistic theory of safety (LPTS), 
which allows to estimate quantitatively the risk of system (as a mea- 
sure of its danger) and to rank the contribution of separate arguments 
to the system danger (in the case of an absence of truth probabilities of 
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initiating events). The ranking of arguments under their contribution 
to the system reliability was proposed by me in 1976 in the monograph 
[Reliability of Engineering Systems. Principles and Analysis. Mir Pub- 
lishers, Moscow, 1976, 532 p.j with the help of introduction of concepts; 
‘‘Boolean difference”, “weight” and “importance” of an argument. 

The aim of the author, from my point of view, is the connection of 
the logic and probabilistic calculus used in the field of technical systems, 
with questions of risk in economics and organizational systems. 

Studying the works by the author, I realized that these economical 
and organizational systems essentially differ from technical ones, and 
the direct carrying the knowledge and results of LPC from area of engi- 
neering into area of economics is not effective, and sometimes and it is 
not even possible. It is likely that much time and many efforts will be 
needed so that the new approaches in the logic and probabilistic calculus 
could make the same revolutionary break in the financial market, what 
was made by George Bool in development of the inductive logic in the 
middle of XIX century, and by G. Markowitz in the choice of the optimal 
security portfolio with the help of the analytical theory of probabilities 
in the middle of XX century. 

The author presumably not wishing to simplify solutions of real prob- 
lems of risk has selected the algorithmic method as the basic method. In 
this connection it is useful to quote the Academician Ya. Tsipkin; “Algo- 
rithmic approach to resolving extreme problems enables to use modern 
computers and not to squeeze the problem conditions into Procrustean 
bed of the analytical approach, that usually move us far beyond from 
those real problems, which we really wanted to consider”. 

The existing publications on the management LP-theory by risk are 
not complete, have small circulation and are not known for a wide com- 
munity of experts. The typical difficulty in mastering by the scenario 
LP-management by the risk in economics and engineering, can be ex- 
plained the fact that the risk LP-theory and such scientific disciplines 
as the LP-calculus, the methods of discrete mathematics and combina- 
torics are not usually included into the educational programs of high 
schools, Therefore publication of the given monograph devoted to the 
LP-rnanagement by risk, seems to be actual. 

Academician of Russian Academy 
of Natural Sciences^ 
Professor I. A. Ryabinin 




INTRODUCTION 



Back to basics, logic and arithmetics, 
to solve complex problems. 

Author 

To the author’s knowledge the risk phenomenon in complex techni- 
cal, economic and organizational systems is not completely recognized in 
the scientific plane and is not also resolved satisfactory for needs of ap- 
plications, despite the fact that in complex systems non-success occurs 
rather often with human victims and large economic losses. The man- 
agement risk problem is current and challenging; it forces us to carry out 
new investigations and to seek new solutions for quantitative estimation 
and analysis of risk. 

Risk is quantitative measure such fundamental properties of sys- 
tems and objects as safety, reliability, effectiveness, quality and accuracy. 
Risk is also quantitative measure of non-success of such processes and 
actions as classification, investment, designing, tests, operation, train- 
ing, development, management, etc. 

In the listed subject fields we shall consider three different state- 
ments of mathematical tasks of optimization by management of risk — 
of interest will be risk in problems of classification, investment and effec- 
tiveness. Generally risk is characterized by the following quantitative 
parameters: 

• probability of non-success; 

• admitted probability of non-success (admitted risk); 

• maximum admitted losses or minimal admitted effectiveness; 

• value of losses or the effectiveness parameter; 

• the number of different objects or conditions of object in system; 

• the number of dangerous objects or conditions of object. 
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It was marked by the founders of many fields of modern science 
John von Neumann and Norbert Wiener, that the behavior of complex 
technical, economic and social systems cannot be described with the 
help of differential equations. However, the description can be made 
on the basis of the logic and the set theory, instead of the theories of 
chaos, accidents, bifurcations, etc, (See the book by Morgenstern and 
Neumann “The game theory and economic behavior”, Moscow, Nauka, 
1970, sec. 1.2.5. and 4.8.3.) 

Analysis of the theories of Management and Risk development and 
the interaction between Man and Risk in complex systems proves cor- 
rectness of this point of view. In complex human-machine systems the 
logic and probabilistic theory (LP-theory) reveals considerable achieve- 
ments in estimation, analysis and forecasting of risk [1-3]. 

The LP-theory attractiveness is in its exclusive clearness and un- 
ambiguity in quantitative estimations of risk; in uniform approach to 
risk problems in economics and engineering, in big opportunities for the 
analysis of influence by any element, including personnel, on reliabil- 
ity and safety of the whole system. The risk LP-model may include 
the logic connections OR, AND, NOT between elements of system and 
cycles. Elements of the system under consideration may have several 
levels of conditions. The system risk dynamics can be taken into ac- 
count by consideration of variation in time of probabilities of condi- 
tions. 

The basis for construction of the scenario risk LP-management in 
complex systems are: the risk LP-theory; the methodology for construc- 
tion of scenarios and models of risk; the technology of risk management; 
examples of risk modelling and analysis from various fields of economics 
and engineering. 

In complex systems the technology of the scenario risk LP-manage- 
ment is based on the risk estimation by LP-model, the techniques of 
the risk analysis, schemes and algorithms of risk management, and the 
corresponding software. Generally, it is impossible to control the risk 
without quantitative analysis of risk which allows us to trace the con- 
tributions of initial events to the risk of the system. Estimation and 
analysis of risk as well as finding optimal management are carried out 
algorithmically with calculations, which are very time-consuming even 
for the modern computers. 

The risk LP theory considered in the book unifies: Ryabinin’s LP- 
calculus and LP-method, Mojaev’s methodology of automatized struc- 
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ture and logical modelling and Solojentsev’s risk LP-theory with groups 
of incompatible events (GIE). 

The LP-calculus is a special part of discrete mathematics, which 
should not be confused with the probabilistic logic and other sections 
of the mathematical logic. Therefore, it is useful to outline briefly the 
history of the publications on this subject. To author’s knowledge, the 
idea and development of the subject should be attributed to Russian 
authors. The contents and formation of LP-calculus originates from 
the work by I.A.Ryabinin “Leningrad scientific school of the logic and 
probabilistic methods of investigations of reliability and safety” (in book: 
“Science of St. Petersburg and sea power of Russia”, v. 2, 2002, p. 798- 
812). 

The LP-calculus was created in the beginning of the 60-th of XX cen- 
tury in connection with necessity of quantitative estimation of reliability 
of complex structures (annular, networks, bridge-like and monotonous 
ones). Scientific literatures of that time could suggest nothing suitable 
to deal with the problem. The experts in reliability could perform cal- 
culations for the consecutive, parallel or treelike structures only. 

In 1987 Kyoto University published the book by I. A. Ryabinin and 
G. N. Cherkesov “Logic and probabilistic methods of research of reli- 
ability structural-complex systems” (M.: Radio and Communication, 
1981, 264 p.) translated into the Japanese language. In the book the 
set-theoretic and logic part of LP-calculus was advanced. In the new 
book “Reliability and safety of structural-complex systems” (SPb., Poly- 
technika, 2000, 248 p.) Prof. I. A. Ryabinin has generalized forty-year 
experience of researches on reliability and safety by the LP-calculus. 
There is a review of this book in English (Andrew Adamatzky “Book 
reviews” — Reliability and Safety of Structure-complex Systems. — Ky- 
bernetes. Vol. 31, No 1, 2002, p. 143-155). 

The present publications in the risk LP-theory and the risk manage- 
ment do not represent the state-of-art in the field of science, they have 
small circulation and the knowledge is confined within a small group of 
experts. The risk LP-theory and such scientific disciplines as the LP- 
calculus, the discrete mathematics and the combinatorial theory are not 
included as a rule into the educational programs of the Higher School. 
It causes the difficulty in way of active mastering the scenario risk LP- 
management in business, economics and engineering. The publication 
of the present monograph, devoted to the scenario risk LP-management, 
seems to be well-timed. 
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The present book has of applied importance. The purpose of the 
present book is to acquaint economists, engineers and managers with 
the bases of the scenario risk LP management, which includes; the risk 
LP theory, the methodology of construction of the risk scenario, the 
technology of risk management, examples of scenarios and models of 
risk in different fields of economy and engineering. 

The important feature of suggested presentation is the attempt to 
unify knowledge from different fields: discrete mathematics, combinato- 
rial theory and Weil’s theorem; nonlinear optimization and algorithmic 
calculations, modelling of Monte-Carlo and on modern computers; the 
LP-calculus [1,3]; the LP-methods [2,4]; the theories by Markowitz and 
VaR for risk of security portfolio [5,6], the risk LP-theory with GIE [7-9]. 

The novelty and utility of the book consist in the following: 

It is the first time when the basic principles of the modern risk LP 
theory (the LP-calculus, the LP-methods and the risk LP-theory with 
GIE) are stated in one work using uniform methodology and termi- 
nology and with practical orientation on use both in engineering and 
in economics. With permission of Prof. I. A. Ryabinin, some mathe- 
matical results and examples from his book [2] are reproduced. The 
technology of the automated construction and analysis of LP-models of 
any complexity are presented following works by A. S. Mojaev [4]. 

The methodology of construction of the non-success risk scenario in 
different fields for all stages of the system life cycle is introduced. For this 
purpose concepts, principles, experience, scenarios and examples of risk 
management in business and engineering at stages of designing, debug- 
ging, operational tests and operation are considered and sj^stematized. 
It should be emphasized that imperfection of risk management of the 
operations mentioned and non-sufficient financing of the testing are to 
result in future failures and accidents. The development of non-success 
scenarios is a basis for construction of risk LP models and quantitative 
analysis of non-success risk. 

The non-success risk LP-theory with GIE, finding an application for 
business and engineering, is introduced. The theory considers the risk for 
systems with several discrete conditions of elements and for system with 
multidimensional distribution of its output, dependent on initial random 
events with arbitrary distributions. For the credit risk estimation the 
risk LP-model has shown twofold higher accuracy than other known 
methods, it is also seven times more robust. When the choice of an 
optimum security portfolio is performed the risk LP-model gives the 
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same accuracy, as the theories by Markowitz and VaR, but allows us to 
solve a wider range of problems of the portfolio risk analysis and to use 
arbitrary distributions of security yield (not only the normal law). 

The description of software for the risk LP-modelling and analy- 
sis is given. The logic transformations and algorithmic computations 
are very complex and time-consuming even for the modern computers 
and they cannot be carried out manually. Software for automation of 
construction of the risk LP-models (package by Mojaev), identification 
of the non-success risk LP-models with GIE (package by Solojentsev), 
orthogonalization of L-functions by the cortege algebra (package by Ku- 
lik), optimization of security portfolio risk (package by Solojentsev) are 
described. 

The examples of application of the risk LP theory and the scenario 
risk LP-management in complex systems are given since examples of- 
ten teach better more, than the a pure theory. Applications of risk 
LP-models in different fields of business and engineering with demon- 
stration of their effectiveness, high accuracy, robustness, ability for the 
risk analysis of one and set of objects and the power in risk management 
are considered in the following examples; credit risks of persons and or- 
ganizations; bank credit activity analysis; bribes, swindles of managers, 
speculations with investments, management of condition and develop- 
ment of companies by risk criterion, struggles of buildings companies 
for profitable contract; financing construction projects by several banks 
with reservation; risk of security portfolio; explosion in a submarine; 
management of nuclear power plant safety; risk of resource prolongation 
of the power equipment; risk of losses quality, accuracy and efficiency. 

The presentation is organized as follows: 

In Chapters 1-6 the methodological aspects of the scenario logic 
and probabilistic non-success risk management are considered, following 
from analysis of connections between management and risk, personals 
and risk, and from study of risk management at stages of design, test 
and operation of complex systems. 

In Chapter 1 the problems of management and risk, management 
by risk and insurance, monitoring and risk are considered. Sources of 
failures and accidents and fields of applicability of methods of the nonlin- 
ear mechanics, the probabilities theory and LP-methods for estimation, 
analysis, forecasting and modelling of accidents are discussed. 

In Chapter 2 the intentional and unintentional actions of personnel 
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resulting in failures and accidents are discussed. The necessity is proved 
to take into account behavior of personnel for development of scenarios 
of non-successes, failures, incidents and for design of safety systems. 

In Chapter 3 principles of risk management for design of complex 
systems are stated on the basis of generalization and unification of knowl- 
edge, technologies and practical experiences of risk management in dif- 
ferent fields of human activity. 

In Chapters 4 technologies of risk management at stages of debug- 
ging and operational tests are considered. They are based on forecasting 
of possible troubles and development of LP-scenarios for occurrence and 
development of incidents and failures. 

In Chapter 5 the technology of risk management for functioning of 
complex system is considered. The technology is based on monitoring 
of deterioration and aging of the equipment and includes construction 
of the LP-scenarios of occurrence and development of incidents and ap- 
propriate risk LP-models. 

In Chapter 6 the basic concepts of management of risk on dangerous 
plant are considered. 

In Chapters 7-14 the theoretical bases of the scenario non-success 
risk LP-management in business and engineering are stated, including 
LP-calculus, LP-methods, and LP-theory with groups of incompatible 
events (GIE). Examples of risk LP-models with logical connections OR, 
AND, NOT, cycles and GIE are given, which are hardly well-known for 
most mathematicians, economists and engineers. 

In chapter 10 first the basic rules of the risk LP-theory with GIE for 
problems of classifications, investments and efficiency are stated. In the 
named problems, having different statement and the criteria, arbitrary 
discrete distributions depended and independent random variables are 
used. 

In chapter 11 the risk LP-theory with GIE for the problem of classi- 
fication for example of estimation and analysis of credit risks is stated. 

In Chapter 12 techniques of identification of risk LP- models with 
GIE on statistical data are given. The risk LP-models with GIE are 
compared in accuracy and robustness with known methods of risk esti- 
mation and objects classification. 

In Chapter 13 techniques of risk LP-analysis in systems with GIE 
for problems of classifications are given. 
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In Chapter I 4 Software which serves for identification of the risk LP- 
models with GIE, for orthogonalization of L-functions and for automated 
construction of the risk LP-models is described. 

In Chapters 15-18 applications of risk LP-models in business and 
engineering are given. 

In Chapter 15 examples of application of risk LP-models in business 
and results of quantitative modelling and analysis of risk, estimation 
of accuracy and robustness of risk models and management by risk are 
given. 

In Chapter 16 the risk LP- theory of security portfolio is stated. 
In contrast to the theories Markowitz and VaR, which use the nor- 
mal laws of distribution, the risk LP-theory may involve any discrete 
non-parametrical distributions of securities yields. 

In Chapter 17 examples of application of risk LP-models in engi- 
neering and results of quantitative modelling and analysis of risk are 
given. 

In Chapter 18 the risk LP-theory with GIE for problems of accuracy, 
quality and efficiency is considered. 

Conclusion contains a review of applications of risk LP-models in 
engineering and business. The differences and similarities of the risk LP- 
theory and other methods of risk estimation in problems of classification, 
investment and efficiency are discussed. 

In writing the book the author proceeds from own his research in 
the fields of design and testing of complex technical systems and investi- 
gation of application of the risk LP-theory in economics [7-9]. Besides, 
some results of the Scientific School of LP-methods created by I. Rya- 
binin are used. The author was one of the editors of the book “Theory 
and information technology of modelling of safety of complex systems” 
and the chairman of Organizational Committees of First, Second and 
Thirds International Scientific Schools “Modelling and analysis of safety 
and risk in complex systems” and the editor of Proceedings of these 
Schools [115-118]. It is natural that the author tries to inform the 
reader on the most useful ideas, principles and methods developed by 
his colleagues in the field of risk management. 

The author wishes to express his thanks to Prof. I. A. Ryabinin for 
his active interest in the publishing of this book and for his valuable re- 
marks during reviewing the book. The author thanks Dr. O. V. Motygin 
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for critical reading of the manuscript, significant contribution to edit- 
ing and translation from Russian by clarifying and sharpening author’s 
draft of translation, and for doing advanced work in T^X-setting of the 
book. The author is also indebted to his former students Dr. V. Kara- 
sev, V. Solojentsev, A. Rukin, A. Rybakov, V. Alekseev, I. Mashkantsev 
and Yu. Dormidonov 

The book is intended for experts and scientists, who work in the 
fields of modelling, quantitative estimation and analysis of risk, and 
also in the fields of risk management in business, technical, economic 
and organizational systems at stages of designing, testing, debugging 
and operation. It will also be useful to students, post-graduate students 
and teachers of economical, financial and technical universities. 

The author realizes that the monograph can not settle all problems 
of management by non-success risk in engineering and economics and he 
will be glad to receive remarks, comments and suggestions, which he asks 
to direct to the address: 191178, St. Petersburg, V.O., Bolshoy pr., 61, 
Institute of Problems of Engineering of RAS; E-mail: sol@sapr.ipme.ru 




Acronyms and general notations 



DNF 




CNF 




ODNF 




PDNF 




GIE 




L 




P 




LP 




VaR 




LP-VaR 




i = Y... 


,iV 




,n 


r = 1,. . , 


,iV, 



^max 

YuY2,.--,yN 

Y 

z, 

Zjr 

P\,P2, ■■■,Pn 
P 

Wir 

Pljr 



Pad 

Ci 

F 



^opt 

P^mc 

Egb 

Eg 

Eb 

Em 

Ks 



dPij 



Logical function in Disjunctive Normal Form 

Logical function in Conjunctive Normal Form 

Logical function in Orthogonal Disjunctive Normal Form 

Logical function in Perfect Disjunctive Normal Form 

Group of Incompatible Events 

Logical (for example, L-model, L-function) 

Probabilistic (for example, P-model, P-function ) 

Logic- and- probabilistic (for example, risk LP-model) 

Value-at-Risk (by Markovitz) 

Logic-and-probabilistic Value-at-Risk 

index of different objects (or object conditions) 

index of different signs or parameters of object or conditions of object 
index of different grades of signs 

maximal number of different objects or object conditions 
logic functions, determining possible objects or object conditions 
logic function for all possible objects or object conditions 
random events (and logical variables), corresponding to sign j 
random events, corresponding to grade r of sign j 
probabilistic functions for Fi, I27 • • • i Yn 
probabilistic function for Y 

relative frequency of grades in a set of objects of systems 

probabilities of grade-events in GIE for nonsuccess of sign-event 

probabilities of grade-events in GIE for nonsuccess of object 

mean risk of the object on statistics 

mean risk of the object on the risk LP-model 

admitted risk of objects 

price for the risk 

objective function of training of the risk LP-model 

number of stages of optimization during training of the risk LP-model 

number of attempt of optimization on one stage 

relation of numbers of non-correct classification of good and bad objects 
error of recognition of good objects 
error of recognition of bad objects 

mean error of recognition of objects (the accuracy of risk LP-model) 
robust coefficient of recognition of the risk LP-model 
contribution of the sign j (grades of the sign) 
in the risk of object i 
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dFj 

Ejrg 

Ejrb 



Ejrm 



to 




Mj 




Xi,..., 


Xj , . . . 


R 




Ng 




r = 1, . 


..,Nj 


Rji, , . . 


, Rjr, . 


El, ... , 


,Zn 


Zjr 





Mi 



Rad 

Risk 



Djr 




contribution of the sign j in the mean risk 
of objects 

contribution of the sign in the object function F 

contribution of the grade-events jr in 

the accuracy of classification of “good” objects 

contribution of the grade-events jr in 

the accuracy of classification of “bad” objects 

contribution of the grade-events jr in 

accuracy of classification of objects 

security yields as random values, % 

mean yield of the security j, % 

relative parts of securities into a portfolio or 

weights parameters influencing to effectiveness 

yield of a security portfolio as random value, % 

number of discrete value in series 

of yield distribution of security j 

numbers of discrete values in series 

of yield distribution of the security j 

yields of the security j on the interval r 

logic variables (random events), 

corresponding to R\^ ... ,Rn 

random events (logic variables), 

corresponding to Rj \ , . . . , , 

mean yield of security portfolio on all set 

of conditions of portfolio, % 

admitted yield of security portfolio 

risk (probability) to have the portfolio yield 

or accuracy parameter less than Rad 

contributions of grade-events to Rad 

contributions of grade-events to Risk 




Chapter 1 



MANAGEMENT AND RISK 



In the present chapter the history of development interrelation between 
theories of management and risk is stated. Causes and consequences 
of large catastrophes and accidents are considered: the most dangerous 
manufactures are indicated, and risk values and possible damages are 
shown. A classification of sources of catastrophes and accidents is given. 
Two different approaches to risk management on the basis of active ac- 
tions and insurance are considered, the role and place of monitoring 
in risk management is discussed. General theses of the State Safety 
Program of Russia are presented. The role and place of the nonlinear 
mechanics methods, of the theory of probabilities and of the logic and 
probabilistic risk theory in modelling and risk management of catastro- 
phes, non-success and accident are considered. 



1.1 History of Interrelation of Management 
and Risk 

Management and Risk existed at all times from the moment of appear- 
ance of mankind. Management provided existence of each human being 
and the whole human community. First, the management was empirical, 
it was performed with account of risk on the basis of intuition, experi- 
ence and common sense. At later stages of mankind history the states 
appeared. Then management was performed by the Supreme governor 
of the country on the basis of the code of rules and directives of religion. 
The basis of such management keeps both in society and engineering up 
to our days. Later, for more efficient management the elements of the 
mathematical management theory and the mathematical optimization 
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theory began to be used in practical resolving of particular problems. 

During Industrial Revolution the classical theory of management 
(regulation) of separate mechanisms, devices and processes, based on 
the description of dynamics of objects in terms of differential equations, 
was created. In management the risk was taken into account indirectly 
by using criteria of stability, opportunity of the resonant phenomena, de- 
struction, etc. Successes of the classical theory of management are enor- 
mous; as an example, management of start and movement of a space- 
craft should be mentioned. Amidst the main contributors to the classical 
theory of management are H. Chestnut, R. W. Mayer, F. R. Bellman, 
L. S. Pontryagin, J. Z. Tsypkin, etc. 

During the World War II purposes of management stimulated forma- 
tion of such mathematical disciplines as operations research (John von 
Neumann, etc.); the theory uses the system approach to statement of 
tasks and decision making. Later, this discipline switched almost com- 
pletely to the theory of games and the resolving of optimization tasks 
by methods of linear and nonlinear programming. Methods for resolv- 
ing of separate tasks of optimization with criteria of economic efficiency 
(transport problem, cutting materials, etc.) were created. 

Immediately after the World War II Norbert Wiener, etc. formulated 
principles of the cybernetic control theory. In the theory observable input 
and output parameters of an object, are used to create the mathematical 
model of the object, named “black box”. Such management was used 
for resolving of particular problems of optimal control. The risk with 
such management was considered as probability of failure in achievement 
of the purpose due to inadequacy of the model and the presence of 
hindrances. 

In 1952 the theory of management of risk of investments appeared 
[5], when H. Markowitz formulated the problem of choice of an optimal 
security portfolio . In H. Markowitz’s consideration yield as the mean 
value and risk, as mean square deviation, and the measure of uncertainty 
of yield was taken into account for each security in a portfolio. Such new 
concepts as diversification, indifference curves of the investor, achievable 
and effective sets of portfolios were introduced. The significant contribu- 
tion by H. Markowitz was marked by the Nobel Prize in economics 1990. 
Further, the portfolio theory was developed by D.Tjubin, D. Marshall, 
W. Sharpe, S.Ross who were also awarded by Nobel Prizes [6]. 

Computers’ coming into the being allowed V. Glushkov, V. Skuri- 
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hin, etc. to create the technology of information management^ namely 
the automated control systems (ACS) [10,11]* These systems have well- 
structured database, information technology with the window interface, 
software for resolving of the certain type of optimization problems, ex- 
pert systems for decision making, software for forming reports and print- 
ing of illustrations. The systems allow to give out any information at 
inquiry or to resolve problems, to find areas of optimal admitted de- 
cisions, to choose the most effective solutions. Acceptance of the final 
unique decision is last to expert. Within the framework of ACS the 
problems of numerical risk estimation were not resolved. 

New step in development of the management theory was formation 
of situational management on the basis of logical-linguistic models ( [12], 
D.A.Pospelov). It was shown that the management of complex objects 
is impossible in principe without taking into account the qualitative se- 
mantic information which can not be expressed quantitatively. For the 
first time in the theory and practice of management the logic^ sets and 
logic connections of objects and events were introduced. Various ap- 
proaches were suggested for description of observable situations, based 
on languages with advanced semantics; various methods of construction 
of knowledge models were presented, allowing to reflect in the mod- 
els qualitative proportions and the rules inherent to the object; various 
procedures were given for finding solutions to problems of management, 
based on logical-linguistic models. The considered theoretical results 
find applications in problems of operatively-dispatching control in sea- 
ports, airports, etc. Problems of risk in systems of situational manage- 
ment were not studied. Further, this concepts were developed in [13]. 

Of great importance was formulation of logical-probabilistic methods 
( [1,2], I.Rjabinin) for quantitative modelling and analysis of reliabil- 
ity and safety of structural complex technical systems. These logical- 
probabilistic methods (LPM) are a special section of mathematics con- 
nected to the logical-probabilistic calculus. These methods make it pos- 
sible to sort elements of complex system according to their importance. 
These methods have passed approbation in real projects of Navy fleet. 
They have become be intellectual core of control systems of reliability 
and safety in many complex technical systems. 

Further development of logical-probabilistic methods was done in 
methodology of automatized structure and logical modelling ( [4], A. Mo- 
zhaev). The methodology make it possible to use all logical connections 
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{AND, OR, NOT) and introduces schemes of the functional integrity. 
The latter allows one to represent the scenario of successful or unsuccess- 
ful functioning of technical or organizational system as a graph including 
fictitious nodes. The software for numerical structural and logical anal- 
ysis of stability and efficiency were developed. They were successfully 
used for the educational purposes and for resolving of various applied 
problems of the analysis and management on the bases of suggested 
methodology. 

On the basis of logical-probabilistic approach the theory of LP-mo~ 
delling and analysis of risk with groups of incompatible events (GIE) 
was created ( [7-9], E. Solojentsev). The theory made it possible to 
model and analyze risk in systems, where elements and the system it- 
self have some possible conditions, and to apply the LP-models with 
GIE for quantitative modelling and risk analysis not only in technical, 
but also in economical, organizational, ecological systems. Conditions 
of elements in systems could be described both quantitatively and qual- 
itative. High accuracy and robustness of LP risk models is stipulated by 
use of Bayes’ formula and constructing of well organized probabilistic 
risk polynomial. LP-risk models with GIE use discrete nonparametric 
distributions of probabilities of grade-events in GIE. The latter makes 
possible calculation with multivariate distributions; the distributions are 
arbitrary and can have “heavy tails”. In LP-risk models with GIE de- 
pendence and coherence of variables is taken into account on the basis of 
combinatorial theory (“everyone with everyone”) and the theory of cor- 
relation is not used. The LP risk model with GIE allows one to perform 
active scenario risk management instead of passive risk management of 
insurance in other methods. Means and the maintenance of scenario 
risk managements of failures and accidents in complex systems on de- 
sign stages, in testing and operation are described on the basis of the 
LP-theory of risk with GIE. 

At the present time two different components in the theory of risk 
management on the basis of active operations and passive insurance are 
intensively developed and their optimal combination [14] is sought. Here 
the great achievements in development and use of monitoring of risk 
management in business and engineering, which allows one to make de- 
cision with open eyes [15], should be mentioned. 

Besides of interest are studies of scientific bases of information [16, 
17], where the conceptual bases of the information theory are consid- 
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ered, its essence, purposes and principles are determined and formulated, 
problems of information theory and ways of their resolving are shown, 
the basic stages and directions of development of information theory are 
also determined, dual nature of mutual relationship between science and 
information theory is revealed inevitably the problems of informational 
safety are considered too. 

In Russia works on strategy of risk management with application of 
new approaches from the area of fundamental sciences started in 1997. 
In the book “Risk Management” [18] by famous scientists, who are also 
the authors of the State Program “Safety of Russia’^ special attention 
were paid to problems of strategy of risk management. The concept of 
authors is the assumption that the mathematical theory of safety and 
risk can be constructed on the basis of the accumulated experience of 
the new science. This theory would take place between the level, where 
political and strategic decisions such as laws are made, and the level of 
development of concrete technical systems. As a methodical basis for 
creation of such theory it was suggested to use nonlinear dynamics, We 
note that the latter point can be true only for accidents such as earth- 
quake, floods, snow avalanche, etc., characterized by slow accumulation 
of energy or weights with their further very fast freeing up. 

In most cases accident in human-machine systems occurs when some 
events happen simultaneously or risk of condition of system and its el- 
ements as result of “deterioration” exceeds the admitted value, Even 
example of a human being clearly shows that the person becomes tired, 
requires rest and food in order to prevent him/her or a technical sys- 
tem, which he/she control, from accidents. Here another approach is 
necessary to model risk of failures and the accidents, which would be 
alternative to methods of the nonlinear mechanics. We shall name such 
approach logical-probabilistic or scenario approach for management of 
risk of non-success. 



1.2 Reasons and consequences of large accidents 

Development of the environment created by technologic activity of man- 
kind in XX century occurred much higher rates, than in previous cen- 
turies. It has resulted in two opposite consequences both in industrial 
countries and in the rest of world [18]: 
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• outstanding results in electronic and nuclear industry, airspace, power 
and chemical engineering, in biology and gene engineering, which ad- 
vanced mankind to essentially new boundaries in all areas of activity, 
were achieved; 

• unprecedented earlier potential and actual threats to a human being, 
to objects created by people, to local and global environment acting, 
not only in military, but also in a peace time, were created. 

Thus, the center of attention moved from dangers to risks — from 
mudflows, typhoons, flooding, earthquakes and other natural phenom- 
ena, to man — caused, ecological, social disasters, stipulated by deci- 
sions, accepted by people. 

For the first time the special attention of the public and scientists 
to large industrial failures was attracted after disasters in 70-80s of XX 
century at the chemical enterprizes in Flixborough (England, 1974) and 
Seveso (Italy, 1976); then , as result, hundreds people were affected, 
there was essential, irreparable damage to environment, huge resources 
(material, human, time, etc.) were spent for liquidation of their conse- 
quences. In 1980s the tragedy in Bhopal (India, 1984) and Chernobyl 
(Ukraine, 1986), perpetual virus attacks in Internet, and large-scale acts 
of terrorism in USA (September, 2001) continued the list. As a result of 
accidents enormous damage to environment was caused, and the amount 
of lost people was measured by thousands [19,20]. 

Strengthening of two types of dangers [21-28] is observed in natural 
and technogenic spheres. First, it is the well-recognized ecological dan- 
gers for nature, as the living environment, caused by persistent negative 
anthropogenic pressure on environment. Increase of these influences in 
combination with global natural processes of change of climate and en- 
vironment can result in ecological disasters of global and national scale. 
Secondly, the rapid scientific and technical development in civil and de- 
fensive areas in many countries of the world has resulted in essential 
gap between exponentially growing threats in natural and technogenic 
spheres and ability of each country and the whole world community to 
withstand these threats. 

The level of a person’s safety, of safety of states and the whole 
mankind, of the natural environment from all increasing dangers of nat- 
ural and technogenic accidents does not raise yet despite the efforts 
undertaken everywhere in the world. It is notable that natural and 
technogenic accidents are capable to create and strengthen threats in 
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sociopolitical, economic, demographic and strategic spheres. 

The insufficient ensuring of safety results in annual losses, measured 
by billions Euros. Problems of safety and risk in ecology, engineering, 
finance and economics, terrorist and information danger have became 
actual problems of state scale. 

Today In Russia there are about 45 thousand dangerous manufac- 
tures, a great number of constructions, whose destruction can result in 
disasters not only of regional, but also of national scale. 

Many countries, including Russia, are facing with necessity of liq- 
uidation in the shortest possible time of large-scale extreme situations 
(ES) having non-military character. If the extreme situation arises in 
industrial area, large city, it inevitably causes in significant destructions 
and losses, hundreds and thousand of human beings can be lost. 

A great number of ES happen annually in the world. In 1994 in the 
Russian Federation 1076 technogenic ES occur. The most part of ES 
happen in industrialized territories. A number of technogenic ES essen- 
tially increased in Northwest (91%), Central (48%) and Transbaikalian 
(41%) regions. 



1.3 The most dangerous industry branches 

According to the level of potential danger resulting in accidents in techno- 
genic civil sphere, it is possible to give extra attention to objects of 
the nuclear, chemical, metallurgical and mining industry, unique unusu- 
ally large-scale engineering constructions (dams, viaducts, oil storages), 
transport systems (space, water and underwater, ground), which carry 
dangerous cargoes and a large number of people, gas and oil pipelines. 
Many military objects such as space-rocket and aviation systems with 
nuclear and traditional charges, nuclear submarines, large warehouses of 
usual and chemical weapons should be mentioned too. 



1.4 Values of risk and damage 

For providing the technogenic safety on the boundary of the XX and XXI 
centuries it should be taken into account [18], that in global technogenic 
environment, both in civil and military sphere there are about 10^ ob- 
jects of nuclear engineering for peace and military purpose, more than 
5* 10'^ nuclear ammunitions, about 8* 10'^ tons of chemical armament of 
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the mass destruction, hundred thousands tons dangerous explosives and 
strongly acting poisonous substances, tens thousand objects with high 
reserves of potential and kinetic energy of gases and liquids. 

In analysis of safety of technogenic sphere along with the mentioned 
above damages it should be taken into account whether of the corre- 
sponding potentially dangerous objects are made in series. The heaviest 
accidents are characteristic for on unique objects, i.e. produced in the 
single copy or in small series. The number of nuclear power reactors 
of the same type is 1-10 with their general number 450-500 in opera- 
tion, the number of the same space-rocket systems is from 3-5 to 50-80. 
Medium-series potentially dangerous objects are estimated by hundreds 
and thousand, and large-series are made in tens and hundreds thou- 
sand (cars, agricultural machines, machine tools). In connection with 
the stated above, the integrated economic risks, which are determined 
by multiplication of individual risks by the number of objects, are com- 
parable for accidents of big objects and for accidents of many small 
objects. 

Of high importance the level of substantiation of safety of potentially 
dangerous objects achieved in designing. With reference to failures of 
large-series complex technical systems, where dangerous damages arise 
in usual conditions of operation, the level of forecasting of safety and 
reliability is 10-100%. Dangerous and catastrophic destructions of large- 
and medium-series complex technical systems in conditions of normal 
operation are predicted in much smaller measure — from 1 to 10%. 

From information about probabilities and risks of technogenic fail- 
ures and accidents on objects with extremely high potential danger it 
follows that the difference in the levels of required and admitted risks, 
from one side, and the level of realized risks, from other side, reaches 
two and more orders. At the same time it is known that increase of the 
level of security of objects from failures and accidents by one order only 
requires huge efforts in scientific and technical sphere and the expenses 
being comparable with 10-20% of the project cost. 

1.5 Sources of accidents depending on humans 

Generally, as complex systems (CS), we shall understand the structural 
complex human-machine systems consisting of the equipment, comput- 
ers, software and actions of the personnel both having elements and 
output with several condition 
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The appearance of emergencies, failures and accidents in such CS as 
nuclear power plants, starting rocket systems, oil- and gas processing and 
other chemical manufactures, pipelines and transport systems, is usually 
classified as rare casual events. However, in view of the consequences 
such as emission of radioactive and toxic substances, explosions with 
scattering parts of construction, extensive fronts of flame, pollution to 
the environment, the biggest of the disasters can be compared with 
large-scale natural ones. 

The reasons of failures and accidents in CS, depending on their de- 
velopers, manufacturers and consumers, are: 

• Insufficient quality of projects; 

• Insufficient quality of development tests; 

• Insufficient quality of operational tests; 

• Insufficient quality of operation monitoring; 

• Deterioration and aging of the equipment in operation; 

• Decrease of quality of the work of personnel due to influence of social 
factors; 

• Mistakes of the personnel; 

• Swindle of the personnel; 

• Terrorist actions; 

• Attacks of hackers. 

Actions of these reasons both separately and in their combination 
results in failures and accidents with human losses (both personnel and 
the population of region), with large material damage, with danger for 
the environment and decrease of living standard of the population. 

We note, that both experts and the public are paid insufficient atten- 
tion to some of the mentioned reasons of failures and accidents, because 
of their appearance with delay; the latter explain the absence of inter- 
est of developers in spending extra money to the project safety and the 
tendency of owners to hide true the reasons of failures, unsatisfactory 
quality of testing of systems. As an example of such underestimated 
reasons we mention. 
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1.6 Risk management and insurance 

We consider features of risk management using a historical example [14] 
of approaches to estimation of danger of sea pirates attacks, the so-called 
Bernoulli’s and Columbus’ approaches. 250 years ago Bernoulli found 
a way to reduce the insurance tariff at insurance of merchant. Using 
low tariff he drew the clients, and due to the big number of clients he 
could achieve sufficient accuracy in calculation of probability of loss of 
the goods or the vessel, and with the low insurance tariff he could get a 
good profit. 

250 years earlier Columbus started searching a way to India. For his 
ships, as well as for the merchant ships of Bernoulli’s time, the main 
threat was the pirates. The probability of attack of pirates was high, 
but whether it was necessary for Columbus to know the value of this 
probability? Columbus equipped the ships with rectangular sails of the 
maximal area. He lost the maneuverability, but this essentially increased 
speed of caravan. On the second day of expedition a pirate sailing vessel 
approached Columbus’ ships, however, some days later, it lagged behind 
hopelessly. It is necessary to notice, that the pirate ships had greater 
maneuverability, than the trading ones, and high speed. But their sails 
were universal, adapted to fight manoeuvre, and had no such large area 
as sails of Columbus’ ships. 

The given facts from history illustrates two approaches to the risk 
estimation. First approach (Bernoulli) assumes that process, which fail- 
ure risk is necessary to estimate, cannot be adapted or it is not con- 
trolled consciously. Second approach (Columbus) is applicable to pro- 
cesses which failure risk should be reduced ad infinitum by appropriate 
adjustment. 

Bernoulli’s approach does not demand an investment of money and 
efforts to transformation of process, which failure risk is estimated. It 
is the passive financial approach. Permanent updating occurs because a 
new process is generated instead of unsuccessful process. The approach 
is applicable to processes, where the failure costs are lower than those 
of the process adjustment. 

Columbus’ approach, on the contrary, should be applied to pro- 
cesses, where failure costs appreciably exceed the process adjustment 
costs. This approach is troublesome, but expenses for its realization 
grow linearly depending on complexity and danger of process, and costs 
from failure of complex and dangerous processes grow in geometrical 
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progression. Thus, with some complexity and danger of process the 
approach of Columbus appears to be economically reasonable. 

Nuclear insurance pool successfully illustrates absurdness of Ber- 
noulli’s approach to the insurance of nuclear and radioactive dangerous 
objects: even for hundred years it is impossible to generate the pool, 
sufficient for liquidation of consequences of failure of Chernobyhs type, 
as the enterprizes are not able to pay insurance tariffs. 

The aspiration of the insurance company to be prepared to failure 
of Chernobyl’s type is nothing but an attempt to resolve the Columbus’ 
problem by of Bernoulli’s methods. Bernoulli’s approach is applicable 
in its original form, if: 

• insurance cases come frequently, values of insurance premiums are not 
significant, insurance tariffs do not constrain economically the activity 
of the insured enterprizes and cover costs of the insurance company, 
which can work effectively; 

• insurance cases come rarely, values of insurance premiums are big 
enough, but insurance tariffs for the large number of the same ob- 
jects of insurance cover costs of the insurance company, which can 
work for long and effectively; 

• insurance cases are coming with any period but the size of insurance 
premiums changes over a wide range and from time to time can put 
the insurance company on the face of the crash. In this situation work 
of the insurance company in Bernoulli’s approach assumes inevitable 
bankruptcy when the most serious insurance cases occur. 

Application of Columbus’ approach in the insurance of dangerous 
and expensive objects eliminates the possibility of the appearance of 
failures such as Chernobyl. 

1.7 Monitoring and risk 

Monitoring is the integral part of safety security in technical, economical, 
organizational and social systems. An example of monitoring is given by 
the world economics. Really, large number of daily and weekly economic 
newspapers inform us about costs or stock indexes of companies, about 
exchange rates, sales volumes, etc. There are numerous independent 
institutions and agencies which estimate and publish ranking of banks, 
countries and branches, the reliability of capital investments. 
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Now using Internet it is possible to follow in the real time { with 
a delay minutes) the situation on all main financial and commodity 
exchanges of the world in (New York, London, Chicago, Tokyo, etc.), 
including sales volumes, a pent-up demand, exchange rates, indexes of 
stocks, the prices for grain, cotton, petroleum, gas, gold, copper and 
other metals and the goods. The same detailed information can be 
obtained for any period in past, on minutes, hours, days, months and 
years. Everything in business is made with open eyes. The openness of 
information is the reason why the world economics for the last 70 years 
has not been in such sharp crises, as in 1929. 

Monitoring of such kinds of sports as chess and tennis allows sport 
organizations to rank players according to their results and, thus, to 
solve the problem of formation of the lists of participants and optimal 
scheduling of tournaments. 

Monitoring in medicine based on patients’ disease records, including 
their cardiograms and analysis data allows physician to organize effective 
and safe treatment. 

Monitoring of the society state via public-opinion polls on various 
subjects makes it possible to reveal the most urgent problems of the 
society to prevent social explosions and to plan effective programs of 
development and reforms. 

For complex technical systems, buildings and constructions, intended 
for long-time operation, failures and accidents can be caused by degra- 
dation of properties of materials, by reaching limit levels of the accumu- 
lated damages, by formation and uncontrollable propagation of cracks, 
by cavitation wear, by breakdown of tightness of flanges, by reduction 
of resistance of isolation of cables due to ageing polymeric coverings, 
etc. For potentially dangerous objects and manufactures the essential 
exhaustion of the design resource is characteristic. In crucial branches 
(power, petrol and chemicals plant) potentially dangerous objects have 
exhaustion of designed resource at the level of 75-90% [18], 



1.8 State safety program of Russia 

As a rule failures and accidents are followed in a short time by a flash 
of activity of “government officials” on creation of the commissions for 
investigation and distribution of welfare payments. Charges of the Min- 
istry on Extreme Situations are going to take soon a quarter of the 
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budget of the country because of increased number of failures and acci- 
dents. 

Their “work” on overcoming consequences is visible “on the face”. 
To ensure the work on decrease of a risk level of failures and accidents is 
much more difficult, as it needs new approaches, strategy, principles and 
methods, new culture and means. Results of these efforts will be visible 
only in some years or remain unnoticed if serious failures and accidents 
do not occur. 

The analysis of results of examinations of large man-caused failures 
and accidents of XX century shows that the further development and 
realization of programs of scientific and technical development of the 
modern civilization and operation of CS is impossible without the sys- 
tem scientific approach to solve the problem of maintenance of safe func- 
tioning similar objects and development of the methodical apparatus for 
quantitative risk estimation. 

Creation of fundamental scientific, lawful and economic bases of pro- 
viding the safety is one of the purposes of the state scientific and tech- 
nical policy and the state scientific and technical program on safety of 
natural and technogenic spheres, intended to increase safety in the in- 
dustrial, energy, transport, building, oil-and-gas, mining and defensive 
branches, in production of new materials and technologies. 

The state program “Safety” defines and fixes transition to the analy- 
sis and management of risks, as the basic system of regulation and safety, 
instead of the existing approach of maintenance of absolute safety [18], 
[21], [22], [24], [25], [26], [27], [28], [29]. The state strategy is intended to 
provide formation, acceptance and use of scientifically approved meth- 
ods and criteria of definition and management of conditions of systems 
in the parameter space of admitted risks. 

The purposes the state strategy are as follows: 

• controllable and normalized state, regional, branch and object man- 
agement of creation and functioning CS by new risk criteria; 

• optimization of actions in extreme situations for minimization of their 
immediate and distant consequences. 

Ways for reduction of risk and softening of consequences of extreme 
situations follow from the general principles of safety in natural and 
technogenic sphere: priority of safety, high level of state regulation, 
use of risk analysis methods, inevitability of the personal responsibility. 
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obligatory compensation of damage, availability of information, declar- 
ative way of activity, analysis of extreme situations. 

The fundamental problem of modelling and analysis of safety of CS 
includes tasks: creation of scenarios of failures and accidents and con- 
struction of mathematical risk models, development of methods for pro- 
viding safety of operator, working personnel and population in case of 
emergencies in CS. 

1.9 Methods of nonlinear mechanics and prob- 
ability theory for accidents 

Nonlinear mechanics methods. In the state program “Safety of Rus- 
sia” hopes are laid for use of methods of nonlinear mechanics for fore- 
casting and modelling of accidents [18]. For that, a number of possible 
approaches and models are considered: regimes with intensive develop- 
ment as analogues of the catastrophic phenomena, strong turbulence as 
a mechanism of origin of the accidents, the self-organized criticality as 
the universal mechanism of accidents, the theory about channels and 
jokers, etc. Since the formulation of these approaches in the program is 
rather declarative, we shall describe these approaches to estimate their 
applicability for modelling and forecasting of accidents. 

Regimes with intensive development as analogues of the catastrophic 
phenomena. In order to forecast the catastrophic phenomena in complex 
organized systems it is necessary to answer a number of key questions: 

• whether the structure of system permits phenomena of this kind? 

• in what elements (areas) an accident can happen? 

• when it will take place; whether it is possible to estimate time of 
development of accident? 

• what part of structure of the system is determining for occurrence of 
accident? 

• of what kind and how heavy could damage be? 

• how should the structure of the system be changed or how should the 
governing influences be regulated to to prevent the accident? 

It turns out that these questions stated in different terms raise and 
are answered in the theory of the nonlinear parabolic differential equa- 
tions [18]. The parabolic equations make a basis of the mathematical 
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models describing evolution of various processes in physical, chemical, 
biological, social, economical, etc. systems. For example, the equations 
are used in the theory of nonlinear heat conductivity, diffusion of the 
charged particles in plasma, filtration of gases and liquids in porous envi- 
ronments, in chemical kinematics, in problems of description of evolution 
of populations. 

Strong turbulence as the mechanism of origin of accidents. It is sug- 
gested to develop an approach to investigate the problem of occurrence 
of rare catastrophic events in systems with complex behavior on the basis 
of synergetics principles. The essence of the approach is the observation, 
that fast processes in systems are often determining, or at least, very 
essential and seriously influencing behavior of slow processes. Therefore 
of most interest are the charge, which spontaneously aries in the system 
and quickly develop in large scales. An example of such process is the 
development of a crack in a solid body. However this example is not 
interesting, because as result of the process, the initial system disap- 
pears. Another example is appearance of large hurricanes and typhoons 
in the system “atmosphere-ocean”. In this case “large-scale perturba- 
tion” does not result in destruction of the system, but leaves an essential 
trace. 

Nevertheless, it is difficult to create models for the phenomena of 
this type. In view of the events, being rare the conditions of their rise, 
even if they are determined, are usually treated as the extremely rare 
combination of improbable events. In the models it is very difficult to 
find the key factors and parameters of order. Among the models with 
exponential distribution, the model of “heap of sand” is most popular 
in the theory of self-organized criticality. As events the theory considers 
massive avalanching from the heap on which separate grain of sand fall. 
Such models are described using strong turbulence concept in Ginzburg- 
Landau equation. 

The self- organized criticality as the universal mechanism of acci- 
dents. Here event is treated as catastrophic or dangerous, if it appears 
unexpectedly (i.e. it can not be predicted or if it is extraordinary (i.e, it 
is distinguished from set of events, related to it ), or both. In either case 
it is possible to conclude, that the system inducing this event is complex 
system, because from simple systems it would be naturally to expect a 
clarity and predictability, from one side, and uniform behavior — from 
another side. 

Though rigorous definition of concept of complexity does not exist. 
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experience by development of synergetics and studying of real systems 
intuitively determined as complex, allows us to state some common ideas 
about properties of any complex system at different levels of the descrip- 
tion. 

1. At the mathematical level, complexity is intricacy related with 
non-linearity of the description, since for linear systems we apply the 
principle of superposition, allowing us to consider independently various 
working factors, parts of system etc., that guarantees its simplicity. 

2. At the physical level, the description, as a rule, is possible only in 
statistical terms, such as the density of probability, correlation, the mean 
of distribution, dispersion, etc. It occurs either due to chaotic behavior, 
specific for many nonlinear systems, which limits possibilities of the 
determined description, or in view of very large number of elements, 
combining the system, what makes such description practically useless. 

3. At the philosophical level, the following observation is essential: 
the more sophisticated and specific mechanism of some phenomenon, 
the less often it should be realized. Besides since virtually any thing in 
nature is somehow connected to complexity, the mechanisms, laying in 
its basis, should be simple and universal. 

From the above stated follows that the investigation should be con- 
centrated on the universal nonlinear mechanisms, resulting in complex 
behavior, demanding statistical description. Thus, in the study it is 
possible “to find a back door”, — to generalize the data on the investi- 
gated complex systems and on the base of this material to try to give the 
description of the mechanisms, laying in their basis. Below we shall con- 
sider manifestation of complexity, and the theory of the self-organized 
criticality. Besides, we shall give a review of some self-organized critical 
models. 

Discussion. It is typical (see, [18]) that despite of loud promises and 
declarations of applicability of the above mentioned and other nonlinear 
methods of mechanics in physical, chemical, biological, social etc. no 
concrete example of modelling of real accident are given. It is easy to 
explain because it is impossible to write down the differential equations 
for laws of conservation of energy, mass and amounts of movement for 
complex systems; it can be made only for the simplest systems and 
elements. 

As early as 50 years ago outstanding scientists John von Neumann 
and Norbert Wiener wrote about impossibility to write down the differ- 
ential equations describing behavior of complex systems. They stated. 
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that mathematical methods which would be developed for complex sys- 
tems, would be based on logic, combinatorial theory and the set theory, 
but not on the differential equations. 

Let us remind the rule “Occam’s Razor” [31] which is applied when 
in conditions of uncertainty or incomplete information for description 
of a complex natural and social phenomena it is necessary to choose 
one of two or several theories (methods). The meaning of this rule is 
that simpler explanations of the phenomena have a high probability to 
appear correct, than more complicated ones. In other words, it is rea- 
sonable to choose the theory, which includes least of possible number 
of assumptions or involved argumentation. The sense of the metaphor, 
giving the name of the rule in question, is in cutting off the superflu- 
ous principles and reduction of model to possible minimal number of 
assumptions. “Occam’s Razor” is an extremely useful but seldom used 
methodological tool. 

We omit discussing other non-linear and logical and probabilistic 
methods which have proved to be successful. We only note that all the 
methods meet demands of “Occam’s Razor” principle” and recommen- 
dations of John von Neuman and Norbert Wiener. 

Probability theory methods. For modelling of risk it is proposed 
to use the informational-statistical approach to formation of risk models 
and their identification from limited information on the basis of analyt- 
ical laws of distribution of random values [17,35,36]. There is a lot of 
different distributions, but they can not rigorously and precisely predict 
rare events of the real world, and it is proposed to improve these distri- 
butions by considering parameters of distributions as random values. At 
this, methods of randomization of Poisson parameter, generating func- 
tions, principle of maximum uncertainty and Lagrange’s probabilistic 
distribution are used. 

In the way, the following distributions are obtained: 

1) The Poisson distribution, where z/ is a quasi determined value; 

2) The modified Poisson distribution, where l/ is distributed by the 
normal law with known parameters; 

3) The modified Poisson distribution, where v is distributed by the 

normal law and estimations of parameters are known; 

4) The modified Poisson distribution, where ly is uniformly distributed 
over a known interval; 

5) The Pascal distribution (negative binomial distribution), where 
the law of distribution z/ is approximated by the gamma distribution 
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with the form parameter m and the scale parameter A; 

6) The non-central negative binomial distribution, where the law of 
distribution v is approximated by the gamma distribution with the form 
parameter m and the scale parameter A; 

7) The Poisson distribution of the degree k, where the law of dis- 
tribution 1 / is approximated by the gamma distribution with the form 
parameter m and the scale parameter A; 

8) The beta geometrical distribution of the degree k, where the law 
of distribution u is approximated by the gamma distribution with the 
form parameter m and the scale parameter A; 

9) The beta negative binomial distribution of the degree k, where the 
law of distribution u is approximated by the gamma distribution with 
the form parameter m and the scale parameter A; 

10) The modified Poisson distribution, where i/ is distributed by the 
normal law and estimations of parameters rriu-, are known (volume of 
sample K < 10); 

11) The extreme distribution, where n is distributed by the geomet- 
rical law and the mean estimation v is known. 

The given one-dimensional parametrical models of distribution do 
not solve problems of estimation and forecasting of non-success risk or 
accidents. We can do uncountable quantity of curves through points and 
it is difficult to say, which curve is better, Many works appears which are 
devoted to more sophisticated apparatus of one-dimensional analytical 
distributions and take into account “heavy tails” of distributions. The 
applications using “heavy tails” are also practically absent. 

The main flaw of the classical theory of probabilities is by using vir- 
tually only one-dimensional distributions, that is the influence of many 
factors (their real number reaches hundred) are not taken into account. 
Let us consider this defect in more detail, 

Multidimensional distribution in the probability theory. In 

real systems the risk depends on many factors. For example, the security 
portfolio includes tens valuable papers of different yields and risks. Often 
different factors have different dimension, the laws of distributions of 
factors are different and not normal. 

Now there is the mathematical theory only for multidimensional nor- 
mal distributions, that is, each individual factor is distributed normally 
and its mean value and dispersion is known. The dispersion matrix of 
all factors is also known. The theory of calculation of the risk in real 
multidimensional systems, with influencing factors having different non- 
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normal laws of distribution, is not created yet. This is one of unsolved 
problems of mathematics. 

The probability theory, as the applied science, are also named the 
“urn” theory, because the basic scientific results were obtained in experi- 
ments with urns and spheres of different colors. In those experiments the 
probabilities or relative frequencies of random choice of different combi- 
nations of spheres of different colors were estimated. Thus, connection 
between the probability theory and the combinatorial theory was found. 

Here two things are important. First, the analytical formulas for 
estimation of event probabilities appeared for convenient estimation, 
but basically were not obligatory, as almost all results could be obtained 
without these formulas, having the table of records of previous random 
samples. 

Second, the combinatorial analysis has not obtained dule develop- 
ment because of astronomical number of combinations. The logic and 
probabilistic calculus can help combinatorics. We have got modern com- 
puters and algorithmic methods for solving of difficult problems. Cer- 
tainly, it is necessary to prove the basic results of combinatorics by the 
“large” computations. However, for applications the astronomical com- 
putations are not obligatory if the appropriate numerical methods and 
algorithms for PC are developed. 

Below in different sections of the book we shall show opportunities 
of the logic and probabilistic theory of modelling and analysis of non- 
success risk in complex systems. This theory confirms the rule “Razor 
of Occam” and concepts by John von Neumann and Norbert Wiener on 
applicability of the differential equations for the description of risk in 
complex systems. 



1.10 Scenario LP-modelling and management 
of non-success risk 

In complex s}^stems the scenario of failures and accidents have logical 
and probabilistic nature. Therefore, we write a scenario of non-success 
or catastrophe and the logic function of risk and build the probabilistic 
polynomial of risk [2]. Elements of CS have logical connections OR, 
AND, NOT and cycles. The mathematic basis for estimation and anal- 
ysis of risk is the logic and probabilistic calculus. The analysis of the 
risk allows us to manage of risk. 
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Probabilities of failures of elements can change in the course of time 
(the elements wear out, age, collapse, depreciate). The risk LP-models 
with dynamic interpretation much more constructive and clear than with 
differential equations, so they are true with high probability. 

Each complex system has some value of risk of safe functioning (and 
each element of the system has value of risk of nomsuccess or failure). 
If the risk becomes more than the admitted one, the system either can 
not be supported by itself, or it is useless, or harmful. Then the system 
ceases the existence (for example, a bank bankrupt). Or there occurs a 
serious structural reorganization of CS when some elements disappear 
and some new ones are brought to the system. The latter changes logical 
connections and probabilities of failure, so a new CS appears. 

Thus, it is possible to simulate visually all past and today catastro- 
phes on the basis of the LP-approach without using the mathematical 
apparatus the nonlinear mechanics [18] and the classical theory of prob- 
abilities. Many examples of real catastrophes can be interpreted by LP 
risk models [21-28] with varied probabilities of elementary events and 
existing admitted risk for a CS in appropriate environment. 

The scientific basis of the risk LP-theory and technology of the sce- 
nario logic and probabilistic management by risk are : the LP-calculus, 
the LP-methods, the LP theory for systems with GIE , the theory by 
Markowitz and the theory of VaR for risk of security portfolio. Besides, 
it implies using of discrete mathematics, combinatorial theory, Weil’s 
theorem, nonlinear optimization, modelling of Monte-Carlo and algo- 
rithmic calculations on modern computers. 




Chapter 2 



THE HUMAN BEING AND RISKS 



The Science and Engineering are crystallization of wisdom, but often 
wisdom brings seeds of insanity and, therefore, rapid stormy develop- 
ment of a science and engineering results in a wide spreading of scientific 
and technical evil [31,38,39]. Growing destruction of the environment 
everywhere over the world, accumulation of nuclear waste products, dis- 
asters, such as AIDS, failures and accidents in engineering, crises in 
economy, the political and information terrorism, etc. are symbolizing 
this fact. Modern industrial civilization or society of automation and in- 
formation is characterized by fetishism of money and sciences, alienation 
of people and growth of dementia. 

A human being and his participation as a risk element stand in the 
center of typical disasters in the modern world. 



2.1 Frauds in business 

Let us consider some statistics on frauds in business in USA [7,38]. 
The Chamber of Commerce informed, that losses due to wastes of hired 
workers are estimated by 20-40 billion dollars annually. The volumes 
of such stealing go much ahead of those by house-breaking, hijacking, 
robberies and the usual thefts being counted in sum. Federal services 
estimate the common annual damage by swindle with a sum from $60 
up to $200 billions. The losses due to telephone swindle in 1991 in the 
market were estimated in $10 billions. 

The Federal Trading Commission (FTC) and the American Associa- 
tion health insurance (AAHI) estimate in 10% the number of fraudulent 
accounts on health services in the field of public health services. By the 
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end of XX century fraud in this area can cause more than $160 billions 
losses. By another estimations, fraud is absorbing up to $75 billions of 
all expenses in USA on public health services. 

Scientific researches show that three from ten workers are looking 
for possibilities to steal something, three others of ten will steal as soon 
as they have opportunity, and only four of ten will stay fair in any 
circumstances. Each year in USA 200 millions thefts in shops (of goods 
in total sum $11.6 billions) occurs. 

According to Bureau of Internal Revenue of USA in 1990, the federal 
government got only 4/5 of all taxes. This underpay of taxes made the 
$100 billions arrears. More than 660 ways of evasion from payment of 
taxes were disclosed. 

In USA, Russia and other countries swindle has begun one of the 
main problems of economic safety of the state. 



2.2 Errors of personnel 

It is notable that not only failures of technical elements of system result 
in accidents. A cause of interruption of normal operation may be a single 
unintended wrong action of an operator or a single omission of a needed 
action (so-called errors of the personnel), it can also be a combination 
of technical failures and errors of the personnel. 

In history of atomic power stations more than 50% potentially dan- 
gerous incidents (small infringements in work) occurred due to mistakes 
of the personnel [18]. It should be taken into account that nuclear sta- 
tions follow the program of quality maintenance and the required degree 
of quality of the equipment, the personnel and auxiliary devices of the 
“person-machine” dialogue is achieved. The concept of auxiliary devices 
of the “person-machine” dialogue includes the necessary and sufficient 
operator’s devices for reliable and safe control of the power unit. 

Failures of refuel systems of launching rocket systems can be classi- 
fied as follows: 70% of failures were caused by aging and deterioration of 
the equipment as a result of long exploitation, 11% of failures were due 
to mistakes of the personnel, 5% — occurred because of constructive 
defects, 11% — were by exploitation factors, and origin of other 3% is 
unknown [15]. 

Since the human being is often “a weak component” , state of CS and 
its safety quite often cannot be estimated without taking into account 
quality of the personnel and working conditions in CS. 
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2.3 Asymmetric actions of terrorists 

The sense of asymmetric actions of terrorists consists in making the 
greatest harm with the least expenses (amidst the expenses terrorists 
count their own lives too). It is sad but today acts of terrorism on 
potentially dangerous objects and in places of mass accumulation of 
people are feasible. 

Now and in the foreseeable future, as acts of terrorism in USA have 
shown (attacks on the World Shopping Center in New York and Pen- 
tagon in Washington), in Russia (explosions of buildings by the Chechen 
terrorists), in Israel (explosions in public places by Palestinian terror- 
ists), etc., the mankind is vulnerable for the small radical groups, that 
ready to play “not fair” . 



2.4 Hackers attacks to informational networks 

Now we can not imagine all gaps in protection of our civilization. For 
example, the level of safety of global computer networks with occurrence 
of computer viruses changed drastically. The racing of more perfect 
viruses against more effective anti-virus programs is going on. As the role 
of information infrastructure grows the given class of risks can become 
more important. Dangers and risks can proceed from a person — hacker, 
not being stipulated by any technological necessity. 



2.5 Personnel in modern civilization 

Here we present the results of the analysis of personnel work in the 
modern civilization, given by Sato Susumu and Kumamoto Hiromitsu 
in their book “Re-engineering the environment” [36], 

Black boxes. Personal are also becoming system components like 
robots for process un-automated on economic grounds. For example, the 
chemical plants are automated; all physical and chemical reaction pro- 
cesses are divided into unit operations or processes. Each unit operation 
is considered as a black box, automated and all unit operations are then 
integrated and controlled. Of interest are input and output relations for 
each unit operation, and the internal mechanisms of the operations are 
often neglected. The control over a unit operation is performed on the 
basis of various measurement variables such as temperature, pressure, 
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rates of heat generation and stream flow rates. The unit operation looks 
like a black box to the human operators. Automation has increased the 
number of black box systems. This inevitably increases the risk of ac- 
cidents, due to incomplete understanding of processes inside the black 
boxes or of the ways of interaction between the black boxes. 

Automation is fully based on modern rationalism which 

• subdivides the whole into elements, 

• neglects qualitative aspects of objects, 

• recognizes objects by quantities. 

Each element thus becomes a target for investigation, the elements 
are integrated to form the whole, and the resulting is controlled by com- 
puter. Real objects, however, have qualitative and quantitative aspects, 
and the automation cannot fully represent real processes. 

Human errors. Automated manufactures require control and mon- 
itoring from the control center as well as daily inspection and mainte- 
nance of each elementary process. The automated systems are designed 
in such a way as to monitor each process by control panels in the control 
room. However, the machine and process may sometimes cause abnor- 
mal events which cannot be monitored from the control center. When 
these events are overlooked, serious accidents may occur. 

Consider a chemical plant where unit processes are connected by 
pipes. Assume that high temperature and high pressure fluids (or gasses) 
flow through the piping network. Such a chemical plant has a high risk 
of small leakage of fluids. The leaked fluids may accumulate, and a 
spark can cause explosions. This type of leakage cannot be detected by 
indicators on the control panel and daily inspections are required. 

Operator errors are inevitable for current automated systems. Mon- 
itoring tasks are monotonous, boring and leading to loss of concentra- 
tion. Humans are not good at this type of monotonous work. They find 
more satisfaction in tasks which require judgments to adapt themselves 
to changing environments because such tasks lead to learning by expe- 
rience. Monitoring tasks with such lack of stimulation are confidence 
destroying and error prone. The human errors do occur frequently in 
modern automated systems. And the errors symbolize unacceptance of 
the monotonous monitoring tasks. 
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A system or a subsystem is shut down by safety devices when a stable 
technological process is disturbed by operator errors. Failed components 
and other consequences of the accident must then be repaired to resume 
operation. Human errors are also characteristic for the processes of shut- 
down, repair, and resumption. In automated manufactures experience 
and expertise are minimized, types of labor are standardized, and the 
number of expert workers is decreased. Thus, it is difficult to find people 
to cope with failures and malfunctions. Engineers have less experience 
in preventing unexpected chain-initiating event from developing into a 
large accident because each engineer is engaged in desk designs of small 
portions of the automation system. This fragmentation of knowledge 
may also be imposed by management, so that an engineer or scientist 
can not go off on him own and start a competing design or construction 
company as he only knows a small part of the complete process. 

Automation and intelligence. Some people suppose that automa- 
tion increases the ratio of scientific or intelligent labor to manual labor. 
Others claim that blue-collar labor comes closer to white-collars labor 
by automation; blue-collar workers are replaced by gray-collar workers 
who are engaged in of monitoring tasks; white-collar workers have risen 
to manage personnel and materials. It is said that automation requires 
intellectual labor which can only be performed by people with education 
levels higher than high school graduates. 

An opposite view claims that gray-collar labor is literally gray be- 
cause a stimulus challenging the labor disappeared. It is difficult to im- 
prove the human capabilities through gray-collar labor. The monitoring 
tasks make the nerves atrophy, causing a new form of fatigue unbearable 
for human beings. Modern labor-related medicine has pointed out that: 

• optic nerves cannot sustain long periods of focusing on flat monitor 
surfaces, 

• extensive periods of monitoring may yield diseases such as auto- 
nomic ataxia (loss of muscle coordination). 

Therefore, monotonous labor typically observed in modern auto- 
mated manufactures is no less inhuman than severe physical labor. The 
transition from blue to gray-collar labor does not imply mean a tran- 
sition toward more intelligent or more humane labor. The increase of 
workers with higher education has nothing to do with the ability or the 
level of intelligence of labor. The tendency of common higher educa- 
tion is a fashion induced by a longer lifespan, rather than a result of a 
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conversion from heavy-type industries to a light-thin-short-small type of 
production. 

It may seem that system programmers have the best work, as they 
are the brain and the center of automation of any manufacture. It is the 
case at the stages of development and implementation of new projects of 
automation. But after the project is finished they are forced to leave the 
manufacture or remain for support of automation system and to perform 
boring routine work, and may be to kill time by writing viruses, or by 
another hackers activity. 

Management intensification. As meaningless, inhumane and iso- 
lated labor increases, management is being intensified. In the tradi- 
tional steel production, management lines were not separated from the 
technological lines. These two types of lines were united into a technol- 
ogy/management system. Technological skills were important in these 
factories, and management was performed by various types of techno- 
logical experts. 

Clear separation of managerial and subordinate work is observed in 
recent reports on the steel industry. In Japan in a steel industry shift 
supervisor is a key person. He, as a “steel man” by definition, has to 
manage shift members not only at the factory but also at their homes. 
Monotonous monitoring tasks granted by only the nervous tension, sub- 
ordinate tasks controlled by a time-table under the mask of scientific 
management, and increasingly intensive labor, drive the shift workers to 
despair. Worker’s feelings are summarized by representative comments, 
like “It turns out that I am now working three times harder than be- 
fore” . Shift workers are being eroded by the labor intensification; their 
families life disintegrates, which in its turn cause harmful influences on 
the worker’s performance. Scientific management by the shift supervi- 
sor is not longer sufficient. He controls the life-styles of subordinates 
after working hours by making the excuse that he is taking care of their 
families. This style of management is required to push workers to work 
under conditions which make them lose their stimulus to work. 

Increasing of routine workers. Automation in steel industries 
has created various types of routine labor while retaining some types of 
routine physical labor. The total number of workers has been decreased 
by automation. However, the number of routine workers increases con- 
siderably in subcontract factories. Automation results in increase of the 
percentage of routine workers. Similar situations are observed in other 
industries. Rapid automation is in progress in car industries where the 
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number of routine workers increases in assembly lines which are difficult 
to automate. 

Some people predict that in the future every process will be auto- 
mated; they consider the current automation as a transition stage. It 
should be noted here automation replaces routine tasks by machine op- 
erations only when such replacements are cost-effective. Some tasks are 
still difficult to automate. Besides, automation itself creates new types 
of routine tasks around human-machine interfaces. Computerization in- 
creases data input tasks at the input side, and data monitoring increases 
tasks at the output side. Automation results in reduction of old types of 
routine tasks and growth of new types of such labor. It is notable that 
in automation the total number of workers decreases, but the percentage 
of routine workers increases. 

Third and fourth levels of industry. The reduction of the labor 
population in secondary industries (mining, construction, manufactur- 
ing, etc.) increases the number of labors in the tertiary industries. The 
development process follows the transition of accent from: 

• primary industry (agriculture, forestry and fishing industry) to 

• secondary (mining, construction, manufacturing), then to 

• tertiary (commerce, distribution, transportation, communication, 
public relations, education, services, and finally to 

• the fourth level (banking, insurance, real estate). 

The expansion of third and fourth level industries is not a social 
needs but a result of over saturation of the second level industry with 
labor population. The expansion of third and forth level industries is 
evidenced by the flood of various types of advertisement, persistent and 
irrelevant enticements to buy goods, and excessive numbers of shops, 
banks and insurance companies. This inflation yields a transition of 
workers types from blue to gray and then to white collar. Some people 
claim that human labor has become more intellectual and less physical 
due to this transition. 

Consider as a typical example a Japanese city bank which is a center 
of the money market. Today, the city bank is a leading company, but 
the labor in the bank is not challenging. Many white-collar workers are 
engaged in the counter services. The cashier at counter continuously 
counts money received from customers. The money is handed on until 
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eventually a final worker in a cash desk receives it. At some point of this 
process, the amount of the money received is printed on a bankbook, 
relevant data are sent to a host computer via communication link, and 
the data is processed and stored in the computer. Money withdrawal fol- 
lows a reverse process. Most bankers are thus doing routine jobs around 
the computer. Other bankers repeat routine home public relations (ad- 
vertising) visits. The bank workers are seemed to be a bright group of 
white collars, but their jobs are unattractive and many bank workers 
have resigned from their companies. 

The third and fourth level industries require many “key punchers” . 
This job requires physical labor because it involves data entry via key- 
boards. The job uses mental labor because it reads a computer program 
list. However, such a physical or mental job is restricted to an extremely 
narrow domain. Such job of “key punchers” results in inflammation of 
sheaths of tendon of wrist and autonomic ataxia and proves inhumanity 
of this job. 




Chapter 3 



PRINCIPLES OF RISK MANAGEMENT 
IN DESIGN 



Occurring incidents are: failures, non-successes, accidents, and catas- 
trophes. We appreciate the risk as the non-success probability, damage 
and the admitted risk. Principles of risk management, which shall be 
considered below, at the design stage are applicable with some success 
for technical, economical and organizational systems. 

At the design stage the system project in the form of the appropri- 
ate documentation is created; problems of risk management at stages 
of development and operational tests are solved, the corresponding pro- 
grams of tests and the monitoring system for the operation stage are 
developed. 

At the design stage the scenarios of danger of the whole system 
and its components are developed and analyzed, and structural, logical 
and probabilistic models of risk are constructed. The graph of danger- 
ous states is built from the top — the final failure event or accident. 
Derivative events and initiating events are introduced. The possibility 
of localization of dangerous conditions at their occurrence is taken into 
account. At the given or chosen probabilities of initiating events the 
risk of failures and accidents is estimated. It allows us, as a result of 
modelling and risk analysis, to choose constructive, technological and 
structural decisions for achievement of acceptable risk. 



3.1 Style, concepts and methods of designers 

Let us consider style, concepts and methods of the chief designer in 
providing safety and the minimal risk of a created new product. As an 
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example we shall describe the style, concepts and methods of work of the 
well-known aircraft designer A. N. Tupolev [40], the founder of known 
airplanes: ANT, Tu-2, Tu-16, Tu~104, Tu-114, Tu-134, Tu-144, Tu-154, 
etc. 

Style. The thinking method by A. N. Tupolev always corresponded 
to the level of the chief designer. He did not lose the common view, did 
not change into the narrow expert, but also did not miss those details 
which are determining ones. He thought, that the chief or main designer 
is appointed to realize the main idea. The head position obliges him to 
protect this idea from encroachments, from uncountable “corrections” 
under which pressure the idea can be simply buried. 

The chief designer who does not make great demands to people, 
cannot make a machine quickly and with a good quality. A. N. Tupolev 
strongly influenced the origin and development of the aviation science. 
First of all it was revealed in his exclusive strictness to authenticity 
of test materials, and also in irrepressible aspiration to understand the 
essence of considered processes and the physical sense of the investigated 
phenomena. 

A. N. Tupolev accepted and realized only those new ideas that had 
strong scientific and technological basing. “I am not interesting, that 
you think. I am interesting, that you have learned, seen, understood, 
that you have made” . 

Concepts. First of all the skills is to find and use among set of 
the new ideas, providing progress, those which can be realized at this 
moment. It is well-known, that the great Leonardo da Vinci put forward 
a big number of new and progressive ideas including the helicopter, 
parachute, and ball-bearing, however for their realization the mankind 
required five centuries. 

In the project of a new experimental plane, Tupolev had to make a 
choice between two new engines: one of them was easier, more economic 
and less overall; another was worse on all these parameters. However 
Tupolev chose the second engine. The reason was as follows: the first 
engine would demand reorganization of large number of oil refineries, 
and it would take time and require huge expenses. 

The best bomber of the World War II Tu-2 had such a number of new 
features, that it was possible to realize during war. The experimental 
plane by designer V. M. Mjasischev was constructed at the same time. 
It was a very good plane but it contained new solutions which could not 
be realized at the existing technological level of production, therefore. 
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the plane remained experimental. 

For some years Tupolev searched a solution what a heavy jet bomber 
should be. Two interesting ideas allowed the project to be realized: 
A. A. Tupolev proposed to arrange engines behind a wing closer a fuse- 
lage, and A. A. Judin proposed to retract undercarriages in special gon- 
dolas on a wing. 

Young experts were often amazed with his apparent inertness in 
questions of introduction of new, progressive proposals. The skilled 
people also understood, that refusal of introduction of innovations on 
the final design stage helped to speed up development and to implement 
the new experimental object. There are examples when groundless use 
of innovations resulted in creation of “crude” designs; their debugging 
strongly delayed introduction in mass production and in exploitation. 
A. N. Tupolev not simply refused innovations, but placed them in “port- 
folio” and used in the following development. 

Any his variant of a passenger airplane borrowed elements of design 
of a previous military airplane comprehensively checked up in exploita- 
tion. 

Methods. In the work of the chief designer the most of time is taken 
by the organization of obtaining information on failures, by analysis and 
elimination of failures at all stages of life cycle of the plane. 

Even the construction stage of the experimental plane and its units 
already brought the new information, including negative one: technolog- 
ical non-effectiveness, excess of the given weight, insufficient strength, 
defects and faires of the equipment and mechanisms on test benches and 
input control. 

He thought that only by full-scale tests and checks of parts and el- 
ements of the future airplanes on test benches it is possible to find the 
confidence in reliability of the made decisions. Full flight airplane char- 
acteristics, characteristics of stability, controllability, maneuverability; 
and fighting qualities of airplanes were determined at the stage of the 
state tests. The following order of classification of defects by results 
of the state tests was established. All defects were divided into four 
groups. The first group includes defects which are dangerous to flights 
and unconditionally needing immediate elimination. The second group 
is the defects which are harmless for flights but complicating the job and 
not allowing normally to perform tests. The third group is the defects, 
allowing to perform tests, but needed unconditional elimination on the 
tested plane. The fourth group is the defects, requiring elimination on 
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prototype serial plane, with obligatory checking of the performed actions 
at the following flight tests of the prototype serial plane as a standard 
for series. 

At exploitation phase the new information about the airplane as 
statistics of failures and destructions due to industrial or constructive 
defects and defects on unknown earlier reasons. The defect might be 
new kinds of resonant fluctuations in structures and systems, fatigue 
failures, unexpected increase of forces acting on levers of control or in- 
teraction in electric circuits and hydraulic systems and much others, 
including problems in products of suppliers. Failures and accidents dur- 
ing mass exploitation, as a rule, are caused by a combination of defects 
of engineering (construction or manufacture) and operation (errors of 
personnel or flight crew). A. N. Tupolev made “uncompromising flght” 
for correctness of reason analysis of accident and the defects, requiring 
elimination by the producer and the customer. 



3.2 General scientific knowledge in the area of 
risk 

General knowledge in risk area is the basis for designing and manage- 
ment of risk and safety of complex technical, financial and organizational 
systems [41,42]. The scientific paradigm proceeds from inevitability of 
failures and accidents and determining the necessity to use the concept 
of acceptable risk. To general scientific knowledge in the area we shall 
refer the following principles: 

• Errors in projects of CS are inevitable; 

• If there are stocks of nuclear, chemical, biological and other energy 
there are also the ways for their leakage to the environment and for 
occurrence of accidents; 

• If there are money, material, stocks, they can be stolen; 

• There is no profit (in business) without risk; 

• Everyone can swindle under pressure of circumstances, if valuables are 
badly guarded and it is possible to hide the trickery for some time; 

• It is impossible to manage the risk without quantitative measurement 
and analysis of risk; 
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• Designers of system should think on its normal functioning, but they 
should also consider it from positions of the saboteurs looking for ways 
of its destruction (I. Rjabinin’s rule); 

• Chief designer of system should not apply all possible innovations 
at once; debugging the system in this case is practically impossible 
(A. Tupolev’s rule); 

• It is necessary to borrow reliable and well tried elements and decisions 
from other products, companies and countries (G. Guderian’s rule); 

• It is necessary minimize the variety of accepted decisions because it is 
impossible to provide high reliability for considerably heterogeneous 
systems (the unification rule by E.Solojentsev). 

If we not acknowledge these rules as scientific axioms it is impossible 
to construct appropriate technologies for risk management. We note 
that many of these positions were rejected and not fixed in standards 
and laws of Russia. It was a common opinion that it is possible to ensure 
zero risk in any systems; besides, faultlessness and usefulness of activity 
of conscious people was supposed. 

Let us make some comments on G. Guderian’s rule. It appeared 
during the Second World War. When Soviet tank T-34 had proved its 
power in the actions, the special commission headed by G. Guderian 
made a conclusion, that the German industry cannot create a similar 
tank for two years because for this time it was impossible to create 
the fuel equipment for the diesel aluminum engine. The decisions and 
technology could only be borrowed from the enemy. 



3.3 Models and rules 

The models, which are necessary for risk management at designing of 
complex systems, as a rule, are not described by differential equations. 
Mainly, the following types of models are used: [7,41,42]: 

• scenario model of risk; 

• structural or graph-models of risk; 

• logical risk models; 

• probabilistic risk models; 

• models of trouble forecasting as critical predicates; 
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• models of testing technology, consisting of procedures and operations; 

• models of objects description in the form of requirements of technical 
specifications; 

• models of expenses of means for decisions and possible damage at 
absence of decisions; 

• models of organizational management in the form of frame networks, 
providing support of technology and protocols, release of reports and 
notifications; 

• models of programs and test reports, represented by tables; 

• models of states of system in exploitation in the form of the table 
“Conditions and parameters” . 

An information technology of the system designing should provide 
a convenient representation of these models and their communications 
through a Database. Risk management at designing is also provided 
by expert systems with rules “if-then” and “by analogy” , semantic and 
frame networks. For example, the technology of designing of automated 
debugging and operational tests have procedures of forecasting, mod- 
elling, planning and decision making which contain about 100 elemen- 
tary operations. From them about 1/3 operations are operations of 
documenting, about 1/3 operations are operations of calculations on 
models and about 1/3 operations require intellectual support for deci- 
sion making with use of rules. 



3.4 Occam’s razor 

In conditions of uncertainty or incomplete information for description 
of complex natural and social phenomena it is necessary to choose one 
of two or several theories (methods). For resolving of such questions 
scientists and experts should know the so-called rule “Occam’s razor” 
named after philosopher William Ockam [31], The meaning of this rule 
is that more simple explanations of some phenomenon is correct with 
high probability, than more complex hypotheses. In other words, if we 
have two hypotheses, explaining the same phenomena, it is necessary to 
choose that from them which includes the least number of assumptions 
and difficult calculations. 

The sense of the metaphor, used to name the specified rule, is in 
cutting off superfluous principles and in constructing the model with 
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minimal possible number of assumptions. “Occam’s razor” is extremely 
useful but rarely used methodological tool. Nevertheless, it is necessary 
to notice, that it is a philosophical principle, which is not true in all 
cases and, therefore, it should be applied with some care. 

For example, consider the problem of approximation of ten points, 
solved to tare a spring. Should we use a straight line or any curve 
from practically infinite set? Application of Occam’s razor results in the 
choice of the most beautiful and economical decision: the straight line 
is simple, than a complex curve. 

Similar problems are usual in science and its applications, including 
modelling and analysis of risk of accidents and failures. The majority of 
models of accidents and failures, published now in scientific journals, are 
described by systems of differential equations, which origin is not clear, 
or use the catastrophe theory or the chaos theory, or enter “abstruse” 
distributions of probabilities of casual events and “special” descriptions 
of “fat tails” of such distributions, etc. Above mentioned approaches, 
along with demonstration of mathematical methods, usually, do not give 
anything to practically useful and it is impossible to check up these 
models. 

At the same time there is the simplest solution or “straight line” 
which consists in constructing logical scenario of connection of events 
and the writing down on basis of the scenarios the logical and prob- 
abilistic risk functions of accident which with the large simplicity and 
clarity will show as all the processes can occur and at which values of 
probabilities. It is necessary to compare all other proposed models with 
“straight line”, but often it is not done. Outstanding mathematician of 
the modernity von Neumann, one of the founders of cybernetics, discrete 
mathematics and the theory of computers, claimed that the mathemat- 
ical methods, which would be developed for their application in social 
sciences, would be based on the logic, the combinatorial theory and the 
set theory rather than differential equations. 

3.5 Physical approach 

The physical approach to debugging and operational tests, monitoring 
and diagnostics, risk management and safety of CS consists in the esti- 
mation of functional system abilities and their elements based on mea- 
surement of parameters and calculation of risk [42,43]. 

The measurement of parameters and indicators is applied to physical 
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destruction (durability and wears), behavior of personnel, economic pa- 
rameters, ecological parameters and the accident and failure risk. The 
physical approach provides rapid estimation of functionalities of sys- 
tems, the approach is alternative and complementary to the accelerated 
and durable tests resulting in failure or accident. 

The physical approach provides an information communication of 
tasks of testing, monitoring, risk and safety of CS on the basis of the 
parameter measurement 



3.6 Scheme of complex object management 

Management of state and development of complex system, and also its 
testing and operation will be performed by us as complex object control 
of the control theory [44,45]. Such management consists in control of 
movement on the chosen program trajectory and correction at the devi- 
ation from it (fig. 3.1). As the parameter, specifying the trajectory, the 
risk can also be chosen. 

Thus, the complex system is moved from the initial condition A to 
the given final condition B following the chosen program trajectory A-B 
divided into some stages j = 1, 2, . . . ,n. The correction is performed in 
case of deviation of system from the program trajectory. 

Proceeding from this interpretation, the following basic concepts are 
introduced: F (Fi, T 2 , ■ • •) are controllable parameters; H{Hi,H 2 , . . .) 
are stages; U{Ui,U 2 , . . .) are controlling influences for organization of 




Figure 3.1. The scheme of control of complex object: Y-controlled parameters, 
U-control actions, Z-corrective actions 
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stage; Z (2'i, Z 2 , . . .) are adjusting influences during stages. The named 
parameters are vector values. 

Controlled parameters Y are measured or observed parameters, which 
we use to judge about the system capacity to work. Leading at the first 
stage (point A) is chosen to be minimal in order to not destroy the sys- 
tem, the last stage (point B) is done on nominal or maximal functioning 
mode (mode with the maximal loading). The system is moved from ini- 
tial condition to the final one through a finite number of discrete stages 
with progressive increasing of parameters. 

During development of the management program designers before- 
hand prepare for possible accident by providing Z-corrections, which are 
certain variants of constructive or technological decisions or resources. 
In creating development program (debugging) it is necessary to deter- 
mine values Y, Z, U for the stages of debugging H. 

For complex system vectors T, Z, U have big length and their realiza- 
tion can demand excessive means. For optimum choice of components 
of these vectors it is necessary to know the expenses on: 

• measurements and management Qy{Qyi,Qy 2 , • • •); 

• control influences Qu{Qui,Qu 2 , ■ ■ ■)] 

• adjusting influences Qz{Qzi,Qz2, ■■■)', 

• stages Qh{Qhi,Qh 2 ^---) 



and also the following possible damages if the actions are not made: 

• Ry{Ryi,Ry 2 , . . .) arc damages at the absence of measurements and 
controls; 

• Ru{Rui, Ru 2 ^ ■ • •) are damages at the absence of control influences; 

• Rz{Rzi, Rz 2 ) ■ • •) are damages at the absence of adjusting influences; 

• Rh{Rhi,Rh2, • • •) are damages at the absence of stages. 



The scheme of management of a complex object is invariant con- 
cerning any objects. This scheme could even be used for management 
of market transformations of economics in Russia on the program “500 
days” by G. A. Yavlinsky. 
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3.7 Minimization of the number of decisions 

Accepting as few as possible variants constructive decisions, it is possi- 
ble to provide (at manufacturing and in exploitation) higher reliability 
of each accepted decision. We shall consider the designing problem with 
use as the criterion function “the minimal number of different decisions 
or the maximal unification of accepted decisions”. The problem is of 
interest for a developing company, aspiring to satisfy needs of different 
consumers with more reliable products and smaller expenses, or for com- 
pany, having high development and wishing to reduce too wide range of 
manufactured products and, accordingly, to reduce expenses for manu- 
facture and increase the product reliability. 

The formulation of such problem assumes the existence and possi- 
bility to find in the mathematical model of the product designing the 
set of admitted solutions [41,42], exactly, the admitted discrete solution 
set (constituted for example, by values belonging to series of sizes of the 
basic detail, established by the state or branch standard). The problem 
is solved in the dynamic optimization of standardized series of produc- 
tions during performance of new projects. Beforehand, the time of an 
order receipt for products with new parameters and sizes is unknown. 

Let us explain the problem statement using fig. 3.2. Here, the ab- 
scissa axis is the number (the basic size) of the product of standard series 
and the ordinates axis is the number of the project in a sequence of its 
performance within, for example, two years under orders of the cus- 
tomer. The fat points on the horizontal lines are the admitted solutions 
for the project from the considered series. 

There are four allowable decisions for the first project, so, the prob- 
ability of the choice of the correct decision is equal to Pi ~ 1/4. It 
is possible that the chief designer will choose decision 3 because it 
provides the minimal dimensions for the first project. Then making 
decision for the second project he should regret because the decision 
he has chosen and started in manufacture for the first project is bad 
from the viewpoint of unification. There are five admitted decisions 
for the second project; the probability of the choice of the correct de- 
cision is again small P 2 — 1/5, etc. Thus, depending on ’’luck” of the 
designer, for six projects he could obtain from six different construc- 
tive decisions (1 — > 3, 2 5, 3 9, 4 — > 7, 5 6, 6 — > 2) up to two 

(2,3,4,5)^8;(1,6)^3. 

Let us state algorithm of the solving of this problem of dynamic 
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optimization of series with the criterion “of small possible number of 
different standard sizes” . Elements of established series of standard sizes 
Di, D 2 , . . . ^ Dn are given by normalized weights (7i, C 2 , . . . , Q, . . . , 
{^Ci = 1). If the company only begins development and manufacture 
of projects, these weights should be fixed Ci — C 2 — ■ . . = Cn — 1/n. If 
the company has already developed projects, the normalized weights can 
be chosen, for example, proportional to the quantity of product release 
with the given standard size. As a criterion function we shall use the 
following expression for entropy of series 

J = ^ Cf • In Cf, i = l,2,...,n (3.1) 

the meaning of the latter can be explained on example of information 
entropy. Suppose that information either or D 2 , or ... or Dn is 
transferred with probability of these events Ci, C 2 , . . . , Cn- If proba- 
bilities Cl, (72, . . . , Cn are approximately equal, it is impossible to give 
preference to any of events. In this case one speaks, that information 
entropy is small. If probabilities (7i, (72, ..., (7n differs appreciably, it is 
presumed, that the information having the greatest a’priori probability 
was transferred. 

The entropy of series (3.1), as well as the entropy of information or 
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Figure 3,2. The scheme of dynamic training of dimension-type row 
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thermodynamic system, serves for an estimation of a measure of “disor- 
der” of series members. Maximization (increasing) of entropy of series 
corresponds to the increasing of distinctions in weights between mem- 
bers of series, it means increasing manufacture of members of series with 
the greatest weights. 

Thus, during designing of new products it is necessary to choose from 
the admitted decisions one that as much as possible increases the entropy 
of series (3.1) or, that the same, to choose as the decision the element 
of series, which has the maximal weight. Naturally, the weight of this 
series member needs to be increased proportionally increasing of serial 
productions, it is also necessary to make normalization of weights of all 
members of series ( 3 . 1 ) and, by that, to obtain a posteriori probabilities 
(weights). 

The stated approach was used for designing of cylinders (characteris- 
tic size is the diameter) of piston compressors in the industry. The series 
of diameters (according to the standard for diameters of piston rings) 
consists of 108 members, the admissible decisions for the project was 
selected by solving the problems of linear programming, first on mm, 
and then on max [41,42]. 

The group of the projects having a place actually for last three years 
was presented to the weighed series of cylinder diameters on serial pro- 
ductions. The group of compressors of one of the companies could have, 
basically, 32 cylinders with different diameters. During consecutive de- 
velopment of projects, the designer chose cylinders with 24 different 
diameters; 13 different diameters was chosen by the considered method. 

3.8 Structural design 

Structural designing serves the important purpose of designing system- 
atization and increase of object reliability. Structural designing is the 
method of modular designing of objects at which process of designing is 
represented as hierarchy of levels of comprehension of the object [41,46]. 
Thus, each certain level is completely isolated from details of the lower 
levels (fig. 3.3). 

The method of structural designing assumes, that at the first stage 
of design the project S is expressed in terms of its essential concepts. 
At this level of abstraction we fix some objects (elements) of the second 
level 6 'i,*S' 2 , . . .. These components are considered further as the object 
components, which will be decomposed at the following level. The pro- 
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cess of definition proceeds up to the level where elements of the object 
become elementary and indivisible. Moving deeper into essence of the 
problem and dealing with the most complex object- elements, the de- 
signer abstracts from details of the lower level. Therefore it is possible 
to provide for modification of the object. The objects of lower functional 
level can have some alternative realizations. It leads to the problem of 
optimal choice or unification of decisions with use of exiting wares of the 
world market. 

Such sequence of the designing, named “from top to down”, is one 
of the basic ideas of the structural designing. The second important 
idea of the structural designing is the use of simple and evident schemes 
of management of the project, which becomes foreseeable and “control- 
lable”. 

The object development process begins from comprehension of re- 
quirements of consumer and market on creation of original elements or 
borrowed elements from former designs, or from realized elements by 
specialized firms. 

Certainly, during “from top to down” designing, the returns to higher 
levels are possible, if there is no effective decisions for elements of the 
lower level. However it is not a reason to reject the basic ideas of the 
structural designing method. 
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Figure 3 . 3 . Scheme of structured design 
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3.9 Concept of the acceptable risk 

The central philosophical question in the safety problem is the choice 
between the concept of “absolute” safety and the concept of “acceptable” 
risk. For the first time the concept of the acceptable risk was stated in 
I. A. Rjabinin’s papers. We shall describe this idea following one of his 
monographs [2]. 

Substantiation of the concept. At first, more humanistic concept 
(at first sight) of the absolute safety was accepted. It was a basis for 
definition of the appropriate standards in the nuclear power and in other 
branches of industry. The detriment of the zero risk concept is by the 
presumption that it is possible to exclude any danger for population and 
environment if we do not spare efforts and means for creation of safety 
engineering systems and the serious organizational acts, providing high 
level of discipline. 

However, even use of most effective safety systems, and advanced 
methods of monitoring in technological processes does not provide, and 
can not provide in principle, the absolute reliability of a system oper- 
ation, excluding any accidents. The zero probability of catastrophes is 
reached only in systems with no reserved energy, chemically and biologi- 
cally active components. On other objects the catastrophes are possible; 
they are not excluded even with the most expensive engineering acts. 
The concept of the absolute safety is contrary to the internal laws of 
nature which have probabilistic character. 

The concept of the acceptable risk has many opponents. They con- 
sider it as immoral, saying that this concept gives designers the right 
to plan failures with probability less than acceptable one. However, it 
is more immoral to mislead ourselves with hopes on the unattainable 
absolute safety. 

Probabilistic risk analysis having been used outside Russia for many 
years, has allowed to accept a set of new actions to increase safety of 
operation of nuclear stations and other potentially dangerous manufac- 
tures. The concept of the acceptable risk allows us more reasonably 
(with open eyes) to concentrate and distribute means not only for ac- 
cident prevention, but also for preliminary preparing for emergency ac- 
tions in extreme conditions. 

Having agreed with the acceptable risk concept and necessity of 
probability calculation of danger of technical systems, it is necessary 
to choose suitable mathematical tools. Such tools, as a rule, are the 
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probability theory, mathematical statistics, mathematical logic. The 
development of the logical and probabilistic safety theory (LP) of CS is 
seemed to be very perspective. 

As the safety LP-theory we understand the basic knowledge on cal- 
culations of the risk of failures and accidents in the structural complex 
systems. It is based on the logical presentation of development of danger- 
ous conditions and mathematical methods for calculation of the validity 
of functions of the logic algebra. The LP-methods of safety research 
allow us to reveal objectively the most dangerous places, the reasons 
and initiating conditions; the methods form another ideology of devel- 
opers and induce experts to concentrate their efforts to the decision of 
principal problems. 

Economic choice of the acceptable risk. The most general and 
universal methods of calculation of the risk value [47] is the approach 
based on the economic analysis of safety. According to this method, the 
criterion of optimum of safety level is the minimum value Q that is the 
sum of two components: Qi(r) is the given charges for safety security 
with the risk r, and is the direct damage, caused by the risk r. 

Thus, 

ropt = arg min Q(r) = arg min[Qi(r) + Q 2 (r)]. (3.2) 




Figure 3.4, Finding of best value of risk 
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The value ropt can be accepted as the acceptable risk value. The graphic 
illustration of the above mentioned expression is given in fig. 3.4. 

The acceptable risk value depends on the national economics level. 
The higher is the economics level, production relations and safety cul- 
ture, the higher is the level of requirements, made by society, to the 
safety of potentially dangerous objects, i.e. to the lower value of the ac- 
ceptable risk. In the process of economics development the requirement 
to safety should increase, and the value of the acceptable risk should 
reduce. Introduction of the failure risk as the universal characteristic of 
the safety meant, in some sense, revolution in theory of safety manage- 
ment. 

3.10 Markowitz’s and VaR-approach 
to investment risk 

Investments are the basis of the market economy in developed countries. 
The security portfolio theory is the most widespread modern theory of 
investments. It makes it possible to optimize, simulate, analyze the risk 
and operate by the security portfolio risk. It solves the problems of 
forecasting and optimization of yield and risk. 

In Markowitz’s theory and VaR-approach (Value-at-Risk) “models of 
averages and dispersions” are used [5,6]. For each security in a portfolio 
the yield, as the mean of distribution, and the risk, as the mean square 
deviation and measure of uncertainty of yield, are taken into account. 
Such concepts as diversification, curves of indifference of the investor, 
available and efficient sets of portfolios, are used. The normal distri- 
bution laws of yield both for each security, and for total portfolio, are 
used. 

Problem of selection of an investment portfolio. The investor 
has a fixed sum of money for investment and wants to invest this money 
on a certain time interval. The beginning of the period is designated 
t = 0 and t — 1 corresponds the period end. At the period end the 
investor sells securities which were bought. As the portfolio has some 
various securities, making this decision is equivalent to selection of the 
optimal portfolio from a set of possible portfolios. 

Making a decision in the moment t = 0, the investor should take into 
account, that yields of securities and the portfolio in forthcoming period 
are unknown. However, the investor can estimate expected (or average) 
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yields of various securities, being based on some assumptions and then to 
invest money in securities with the greatest expected yields. Markowitz 
notes that it will be, in general, unreasonable decision. The typical 
investor wishes the highest yield but simultaneously wants the yield to 
be so determined, as far as possible . It means that the investor, aspiring 
simultaneously to maximize expected yields and minimize uncertainty 
(the risk), has two purposes, contradicting each other, which should 
be balanced at purchase decision making about at the moment t — 
0. Markowitz’s approach for decision making makes it possible to take 
into account both these purposes adequately. The approach implies 
diversification, i.e. purchasing of not one, but several securities. 

The yield of security j for one period can be calculated using the 
formula 



O’ “ ^oj)/Roj, (3.3) 

where i?oj is the security yield at the moment t = 0; Rij is the security 
yield at the moment t — 1. 

As the portfolio is a set of various securities, its yield can be calcm 
lated analogously: 



rp ^ {Ri - Ro)/Ro, (3.4) 

where Rq is the portfolio yield at the moment t — 0; Ri is the portfolio 
yield at the moment t — 1. 

At the moment t = 0 an investor can not know the yield for all port- 
folios. Hence, the investor should consider the yield, connected to any 
of these portfolios, as a random variable. Such variables have character- 
istics, one of them is the expected (or average) value and another is 
the standard deviation Up. 

The investor should base the decision of the portfolio selection ex- 
clusively on the expected yield and the standard deviation. It means 
that the investor should estimate the expected yield and the standard 
deviation for each portfolio and then choose “the best portfolio” , basing 
on the ratio of these two parameters. 

Expected yield. As it was marked above, the portfolio represents 
some set of various securities. Thus, the expected yield and the standard 
deviation of portfolio should depend on expected yield and standard 
deviation of each securities, included in the portfolio. Besides, obviously. 
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it should be taken into account, what part of money is invested in each 
securities. The expected yield of the security portfolio is as follows: 

N 

= (3.5) 

1=1 



where: 

is the part of money, invested in the security i; 

fi is the expected yield of the security i; 

N is the number of securities. 

Standard deviation. The measure of the risk should estimate de- 
viations of the achieved result from the expected one. The standard 
deviation is the measure, allowing us to do it, as it is an estimation of 
the real yield deviation from the expected one. In the case when the 
yield distribution of a portfolio can be approximated by a curve of nor- 
mal distribution, the standard deviation really is a very good measure of 
uncertainty degree for estimation of portfolio trend. The approximation 
is often considered as the plausible assumption at the yield analysis of di- 
versified portfolios when the investigated period of holdings of securities 
is short (for example, quarter or less). 

The formula for calculation of the standard deviation of a portfolio 
is as follows: 



Ur 



N N 
i=l j=l 



1 1/2 



(3.6) 



where Cij is a covariance of security yields i and j. 

Analysis of portfolio. In Markowitz’s approach to the decision 
of the problem, an investor should estimate alternative portfolios from 
the viewpoint of their expected yields and standard deviations, using 
indifference curves. In the case when the purpose is to avoid the risk, 
the portfolio, laying on the indifference curve, which is located higher 
and more to the left than other curves, will be chosen for investment. 

From a set N securities is possible to combine the infinite number of 
portfolios. Fortunately, the investor should only consider a subset of the 
set of all possible portfolios, belonging to the so-called efficient set. The 
investor will choose the optimal portfolio from the portfolio set, where 
every portfolio provides the maximal expected yield for some risk level 




Principles of risk management in design 57 



or provides the minimal risk for some value of the expected yield. The 
set of portfolios, satisfying these two conditions, is the efficient set or 
the efficient border. 

The VaR-approach for selection of portfolio (Value-at-Risk). 

The VaR-approach for selection of the portfolio by criterion of allowable 
losses (draw down criteria) is alternative to Markowitz’s approach. We 
shall consider the typical case of an investor who is willing to avoid 
risk. The choice of the optimal portfolio is made by the condition of 
maximization of the admitted yield 

^ad ” '^p — ha * (7 max; (3.7) 

taking into account that VaR = ha^(Jy the latter formula can be written 
as follows: 



Rad = '^p ~ VaR — > max. (3-8) 

Here: rup, Rad are the expected and minimal admitted yields of security 
portfolio respectively, ha is the number of standard deviations in quantile 
of order a (level of trust); for example, for trust level a = 95% the value 
of ha is 1.65; and for a = 99% the value of ha is 2.33; cr is the standard 
deviation of the portfolio yield, VaR is a probable loss. 

In conclusion we note that the assumption about the normal law of 
distribution of every security and portfolio yield (according to Markowitz’s 
theory and VaR-approach) is very strong and not always justified. 

As it will be shown in Chapter 15, the non-success risk LP-theory 
with GIE successfully solves the choice problem of the optimal security 
portfolio unifying Markowitz’s and VaR techniques. It allows us to re- 
move the essential assumption in the portfolio theory about the normal 
distribution law of the yield of each security and the whole portfolio and 
to solve new problems for the analysis and forecasting of the portfolio 
risk. 

3.11 Active and passive management of risk 

Let us formulate the concept of safe deterioration of the material re- 
source part [14]. If a material resource in the start of usage has a value, 
exceeding the necessary resource for operation of the object, then the 
process of resource deterioration has two stages. At the first stage the re- 
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Figure 3.5. Frequency distribution of failures in result of wearing of material 

resource 



mained not-depreciated part of resource completely provides trouble-free 
operation of the object. The probability of a failure, caused by deteriora- 
tion of the given resource, does not differ from zero. At the second stage 
the material resource is depreciated much, so that the probability of fail- 
ure of the object because of deterioration of the given resource accepts 
some non-zero. The time corresponding to the moment of transition 
from the first stage to the second stage, is the so-called threshold time. 
It is possible to control the threshold time: the influence of any material 
resource on non-failure operation of an object can be investigated. 

The material resource can be considered as a set of resources, where 
each resource is wearing out in the course of time. For each resource 
there is some function , Xm), that represents dependence on 

time (t) and on conditions of operation (xi, . . . ,Xm)- This function is 
usually investigated beforehand by experiment with material resource i. 
In the range to -F t\ the function is not defined (figs. 3.5 and 3.6) which 
corresponds to the fact that frequency of failures as result of deteriora- 
tion of the given resource in the range to ~ ti is equal to zero. Since 
generally the material resource consists of a set of internal resources, 
always there is a danger of existence of the deterioration function of an 
unexplored internal resource Rs{t, x\,. , . , Xm) which has some non- zero 
finite values in the range to t\. A single fact of failure because of de- 
terioration of an internal resource Rs{t, xi, . . . , Xm) leads to necessity of 
researches which will let change exploitation conditions in such a way 
that the repeated occurrence of the given event in the range to 
becomes impossible. Since to the left of the point t\ the probability 
of breakdown is equal to an infinitesimal value, and to the right of the 
point the probability has finite values, it is reasonable to suppose that 
the threshold time is near the point ti. The traditional approach to se- 
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Figure 3.6. Different interpretations of frequency distribution of refusals ass a result 
of wearing of material resource 

lection of the distribution function of failure does not assume existence 
of the threshold time. 

Experimentally obtained data on the object breakdown, which hap- 
pen because of deterioration of any controllable material resource, rep- 
resent the operating time, laying in a limited range of time. The life 
of a material resource can be divided into three qualitatively different 
periods: 

to -b ti is the period, when the material resource is sufficient and 
there is some reserve of the resource; 

ti -F t 2 is the critical period, when the material resource has no 
reserve and continues to wear out; 

t 2 d- too is the period, when the material resource is already ex- 
hausted. 

The moment ti is the threshold time. If work with the material 
resource is correctly organized, that is beforehand, before the threshold 
time, the material resource is regularly restored, it is possible to claim 
that it is possible to control the threshold time. The value of the reserve 
factor for the time between two procedures of restoration of the material 
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resource following one after another, can be found on the basis of the 
investigated material resource and the value of a possible damage in the 
case of failure, caused by deterioration of the given resource. Hence, the 
opportunity to control the threshold time directly depends on researches, 
that is, legitimacy of concept of the safe deterioration of the material 
resources depends on realization of timely and sufficiently wide program 
of researches of material resources. 

In the case when the material resource is widely used, information on 
the resource deterioration is usually sufficient and available. Researches 
should be directed to revealing of qualitatively new features of the re- 
source. If the material resource is used seldom or unique, researches can 
be productive only when the intensity of the material resource deterio- 
ration which can be achieved in researches is higher than one in the real 
operation process. 

Practical use of the concept of safe deterioration of the material re- 
source consists in the following: before the threshold time it is necessary 
to manage by the risk actively, raising reliability of the weakest and 
most dangerous elements of the system. It is necessary to use results 
of monitoring of conditions of these elements. After achievement of the 
threshold time it is necessary to replace dangerous elements or if it pos- 
sible and reasonable to insure the elements or the system as the whole. 

3.12 Algorithmic calculations 

It is not a secret the most mathematics and mechanics are still demon- 
strating us the your skill by analytical solutions and transforms and 
are using a computer for printing results of their intellectual refined ex- 
cises. However, at quite “strong” assumptions their problems are come 
to analytical calculations for points, strings, plates, cases, etc. 

Problems of logic and probabilistic estimations and analysis of risk 
are always connected with complex algorithmic calculations, which are 
so labour-intensive, that arises the problem of estimation of the com- 
plexity algorithm and decreasing laborious of calculations. 

Algorithmic calculations are the following stages of constructing and 
using of the the LP-models: 

• constructing of the risk L-function and the risk P-function; 

• solution of the optimization problems with calculation of criteria and 
characteristics of risk models, of risk elements, risk objects and the 
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system in the whole; 

• fulfilment of combinatoric and logical and probabilistic analysis of risk. 

3.13 Arithmetical and logical addition 

Initiating factors (signs) influencing the final event of the system, can be 
added arithmetically or logically. The number of such added factors can 
be from several units to several tens. Below we shall study the depen- 
dence of the final event probability from values of probabilities of factors 
and their numbers, and also we shall compare results of arithmetical and 
logical addition of probabilities of sign-events. 

The logical function for addition of events (factors) Zi^ Z 2 , ■ ■ . is 
as follows: 



T = Zi V Z 2 V . . . V V . . . V (3.9) 

In words, it means that the failure occurs, if occur any one, any two . . . 
or all initiating events. After orthogonalization of the logical function 
(3.9) the following probabilistic function can be written (probabilistic 
polynomial) [7]: 



P = Pi+P2 Qi + P3QiQ2 + ..., (3.10) 



where 

Pi, P2 j • ■ ■ are probabilities of events Zi, Z2 , . . . ; 

gi = i-Pi,g2 = i-P2,.... 

The arithmetical function for addition of events is as follows; 



P — Pi + P2 + P3 + . . . + Pj + . . . + Pm (3.11) 

where Pi, P2 , . . . , P^, . . . , Pn are weights of factors Zi, Z2 , . . . , Z„. 

The value P of the probabilistic polynomial (3.10) always belongs 
to the interval f0,l] at any values of probabilities of initiating events 

0 <P,<l;,=V, 2 .,..,Z 

If there is one sign-event (n = 1), the probability of the final event P 
in logical addition (3.10) will linearly depend on the probability of this 
sign-event Pi (fig. 3.7). If there are two initiating sign-events {n — 2) 
in the logical addition (3.10), the probability of the final event P will 
have A-type dependence on probabilities of sign-events Pj, j = 1,2 
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Figure 3.7. Risk in function of number and probabilities of initiating events 



(which are given with identical values). If there are three and more 
sign-events, the probability of the final event P also will have 5-type 
dependence on probabilities of sign-events Pj, j = 1, 2, , . . (which are 
given with identical values too). The steepness of 5-curve will increase 
with increasing n. 

The probability of the final event in the logical addition (3.10) de- 
pends both on the number of sign-events, and on their probabilities. 
The saturation of probabilities (P = 1) also depends on these fac- 
tors. We note, that only low probabilities of initiating events (sign- 
events) provide the small total risk {P = 0.02 -b 0.04 for P{ = 0.001). 
Comparison results of logical and arithmetical addition of probabilities 
of sign-events are shown in fig. 3.6 for the number of sign-events 41, 
20, 5, 1. For the big values of weights of signs Pj, j = 1,2, ...,n, 
and for the big number n, the final event probability, calculated as the 
arithmetical sum of probabilities, becomes absurdly large (P > 1). The 
arithmetical and logical sums are close only for small values of proba- 
bilities of initiating events and the small number of the events. There- 
fore, the technique based on arithmetical addition has satisfactory ac- 
curacy only for small number of signs n ~ 1-^3 and their small weights 
Pj - 0.001 -b 0.0001, j = 1, 2, . . . , n. 

Comparison of polynomials for arithmetical and logical addition (3.10) 
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Figure 3.8. Risk in function of number and probabilities of initiating events 



and (3.11) shows that the logical and probabilistic polynomial (3.10) has 
more complex structure and, consequently, better possibilities for the 
adequate description of the final event risk. 

It is also notable that the polynomial (3.10) can replace with success 
a neural network (NN) with arithmetical addition of edge weights. The 
logical function (3.9) for the probabilistic polynomial (3.10) also has 
quite clear sense in comparison with NN. Formulas on basis of NN are 
deprived of the physical and logical sense. 





Chapter 4 



RISK MANAGEMENT 
AT DEBUGGING TESTS 



In the present chapter we shall discuss results of analysis of debugging 
processes of some complex objects. The meaning of debugging tests 
is to find and to remove errors in a project. We shall state principles 
and schemes of the debugging management and describe procedures of 
debugging technology. Examples of failure scenarios and building struc- 
tural, logic and probabilistic models of non-success risk of debugging 
tests of machines are given. We shall propose two quantitative crite- 
ria for management of debugging process: the coefficient of debugging 
difficulty and the non-success risk of debugging tests. An example of de- 
velopment of program for debugging tests is given. The obtained results 
can be used for management of debugging test of complex engineering, 
technological and organizational systems. 



4.1 Definition of debugging tests 

Bad quality of the debugging technology of complex objects results in 
large losses of time and means in the debugging and risk of failures 
and accidents in operation. Though the debugging ever was a part of 
any technology, there is a small number of publications on the theory 
of debugging. Mainly it is explained by difficulty in formalization of 
debugging process. It is necessary to note works [42,48-50], in which 
the questions of automation of debugging tests on stands were consid- 
ered, and works [51,53], in which questions of debugging tests in real 
conditions of operation with real personnel are stated. Unlike the men- 
tioned works, we shall pay basic attention to questions of formalization 
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of debugging and optimal control of debugging process on the basis of 
construction of scenarios of failures and structural, logic and probabilis- 
tic models of debugging non-success risk. 

As examples of complex and yet not solved problems design and 
debugging are airships, nuclear fusion, etc. 

Complex objects, for example engines, are characterized by the fol- 
lowing attributes [42,45,48-50]: structure complexity and a large num- 
ber of systems and mechanisms, complex thermo-, gas- and hydrody- 
namic processes, high thermal and mechanical loading of basic details, 
interrelation of processes and influence of their parameters on reliability 
of units and details; non-adequacy of mathematical models of processes 
and of intense condition of details; discrepancy of various properties 
(profitability, reliability, weight, cost) and consequently complexity of 
the selection of optimal solutions; variety of modes of operations and 
conditions of an environment; stochastic behavior caused by random 
factors, by evolution of the object and by drift of parameters. 

For a complex object, along with stages of design and manufacturing, 
of importance is the stage of debugging. The concept of “debugging” 
is identical to concepts of improvement and operational development. 
In debugging it is necessary to obtain parameters of processes, level of 
reliability and quality of the object given by the technical specification 
and project. In debugging one manages a non-stationary stochastic ob- 
ject, and debugs, as a rule, individual samples. The basic purpose of 
operational debugging are searching; errors in the project and making 
decisions on their elimination, The information on errors in the project 
is obtained at tests by measurement of parameters, failure-breakdowns 
and failure-restrictions consisting in exceeding of admitted values by 
some parameters. 

The object condition during debugging at the moment t is the ran- 
dom event. It is either failure-breakdown, or failure-restriction, or ex- 
pected functioning. The object condition Y is defined by random condi- 
tions ^i, 52, . . . , 6'n of its subsystems, units and details: either breakdown- 
failures or restriction-failures or expected functioning. In their turn, 
the failure-events 82 ^ ■ ■ ■ , Sn are caused by random initiating factor- 
events Xi,X 2 , . . . ,Xm- In debugging tests the measured values of the 
initiating factors can surpass admitted values. 

The random events Y, S and X are logically connected. The graph- 
model of non-success risk of debugging (or the structural model) is con- 
structed following the scenario of failures, written by experts being well 
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aware of the object. Using the structural model we build the logic non- 
success risk function, the orthogonal logic non-success risk functions and 
the probabilistic non-success risk polynomial [7,9]. Furthermore, we use 
the polynomial for the quantitative estimation of debugging non-success 
risk at development of the debugging test program and the debugging 
process management. 

4.2 Analysis of debugging process 

Loss at debugging. The absence of rigorously justified technology of 
debugging, non-optimal decisions, the intuitive approach in conditions 
of the large uncertainty result in significant losses of means and time 
both in debugging and in operation of poor debugged objects. We can 
give some examples. 

The engines make about 90% of all energy, and the compressors con- 
sume 8% of power stations energy. The development process of these 
objects lasts for 4-8 years, thus, expenses of time and means for de- 
bugging take up to 80% of ail the project cost. In USA for the period 
from 1950 to 1970 the expenses on ground tests at development of air 
engineering [42,45] increased from 5% to 35%. In particular, two third 
of general charges on the space program “Apollo” was spent for sys- 
tems of ground tests. The debugging of the designed jet engine takes 
approximately 70% of all the development time. 

Normative documents. The standards on the product develop- 
ment do not provide “debugging” in the life cycle of products. The 
factory and inspection tests can not replace debugging of the product 
prototype, since the tests establish only conformity of parameters of 
the object to the technical project and documentation. Standards de- 
fine tens types of tests, among which we shall not find the debugging 
ones — the flaw of standards and other normative documents is that 
they do not assign the stage of debugging and debugging work, though 
these works are carried out for any project. Therefore the customer 
does not have the legal bases to require the realization of qualitative 
debugging tests, which cost is rather significant in comparison with the 
project cost. Now debugging is carried out on the basis of intuition of 
experts and normative documentations of companies. 

Analysis of debugging processes. Let us present results of anal- 
ysis of debugging processes performed for more than 20 different ob- 
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jects [45]. 

Debugging of stuffing-box of the Q-th step of the compressor VSH- 
2,3/630. The complexity of the work was determined by the high pres- 
sure of very penetrative gas hydrogen (63 MPa), the small diameter of 
the plunger, the absence of its cooling and limited greasing stuffing-box. 
The debugging took two years. 

Mobile compressor device MCD-30/120. The time of debugging tests 
was only 360 hours for 6 years, due to serious failures and breakdown. In 
the debugging the autonomous debugging of systems and mechanisms 
and special means were not used. 

Ethylene compressor of super high pressure 4^40-250/2500. The 
complexity of the work was due to high pressure of the gas (250 MPa). 
The debugging proceeded for 4 years and finished successfully. In the 
debugging a unique stand was used. 

Free-piston machines (FPM). Some organizations carried out the de- 
velopment of free-piston gas generators and compressors for more than 
15 years. The work was stopped. These machines are more complex, 
than crank diesel engines and compressors, because of their high dy- 
namics and impossibility to execute autonomous debugging of separate 
systems and units. In the debugging of FPM the highest failure inten- 
sity took place in the debugging beginning, and the FPM collapsed after 
the first start. After one year of debugging 5-hours continuous work of 
FPM was achieved. 

Diesel locomotive engine DLE 26/26. Debugging successfully fin- 
ished for 7 years. However, later large volume of work to increase re- 
source and reliability was carried out. The debugging locomotive diesel 
engine DLE 32/32 was performed on the basis of achievement in devel- 
opment of the diesel engine DLE 26/26, but yet the process passed with 
large expenses of means and time. 

Debugging analysis of these and other machines (engines, compressor 
stations, ships, airplanes) shows that efficiency coefficient of debugging 
can be calculated as 



V = Ttest/Tall, (4.1) 

where Ttest is time in hours; Tail is calendar time in hours (fig. 4.1). 

The efficiency coefficient equals only to 5-12%. The rest of time 
is spent for restoration of the object after breakdown, preparation of 
measurements to figure out reasons of failures, manufacturing of details 
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Figure 4.1. The graph of useful usage of time at debugging of complex object: 
horizontal lines are downtime 

with the new constructive and technological decisions, etc. 

For the above described objects, statistical models of failure intensity 
in debugging were constructed. For this purpose, the time of continuous 
work of the object during the debugging was broken into intervals. The 
normalized cost of expenses on failure elimination was attributed to the 
interval middle. The failure data are best approximated by Waybull’s 
distribution with the greater failure intensity in the beginning of debug- 
ging process. For example, if the debugging time of FPM for a period 
equals to approximately 1000 hours, 40% failures occur for the first 30 
hours, 70% happened for the first 100 hours, etc. In view of such failure 
intensity it is difficult to make correct decision, and often the effective 
solution does not exist, because realization of the decision requires large 
expenses and long detention, and also development of optimum strategy 
of debugging. It is to note that the amount of spare parts does not have 
essential meaning, because all of them will be quickly spent, if we did 
not find the correct decision ensuring decreasing of failure intensity. 

As results of the debugging analysis of different machines, the fol- 
lowing conclusions can be made: 

• Debugging tests take up to 80% of means and time given to the project; 
the factor of effective usage of time (efficiency coefficient) of debugging 
process is equal to 5-12% only; 

• The greatest failures intensity is often characteristic for the beginning 
of debugging process; 

• The opportunity that large number of failures and other troubles hap- 
pens is often not anticipated by debugging programs. This results in 
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large losses of means and time in realization of debugging tests; 

• Poor-quality technology of debugging tests reduces the object reliabil- 
ity in operation and results in high risk of failures and accidents. 



4.3 Management of debugging process 

Principles. Now we observe change of perception debugging as an art, 
to understanding, that the debugging is organization. The approach “as 
it happens” is replaced by the approach with well-defined plan. It means 
that the developer should proceed not from optimistic expectations of 
debugging tests being easy and short in time, but from knowledge that 
a large number of failures will happen caused by errors of designing and 
manufacturing. Therefore, it is necessary to plan voluble resources for 
development of methods and means of debugging. The debugging should 
be automated and continuous due to 

• forecasting of failures and other troubles, 

• planning of search of failures, 

• beforehand prepared decisions in case of failures, 

• preparation of object to debugging, 

• using measuring, computing and information means for operative per- 
formance of work, 

• decreasing probability of destruction at the first stages of debugging. 

In organization of debugging process the principles [42,45] are used; 



• the physical approach to search of restriction-failures by measurement 
of parameters and their comparison with design and admitted values; 

• decision-making for elimination of failures in mathematical models 
trained on measurement data; 

• forecasting of failures with the help of the trained mathematical mod- 
els; 

• consecutive complication of debugging stages to avoid destruction- 
failures at the first stages of debugging and to provide time to measure 
parameters; 
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• forecasting and planning of debugging at the design stage; 

• replacement of long-term tests to destruction-failures by the program 
of the short tests, intended for revealing of restriction-failures; 

• making the first test in the regime, where the probability of object 
destruction is small, 

• maintenance to provide massive revealing of restriction-failures and 
decision-making for their elimination; 

• maintenance of continuous debugging by automation of search of re- 
striction-failures, decision-making and forecasting of failures; 

• performing autonomous debugging of separate systems and details on 
special stands. 

Management. The process of debugging object tests is interpreted 
as a process of management of complex object [44, 50] with movement 
from the initial condition to the given final one following a chosen tra- 
jectory and with correction in the case of deviation from the trajectory 
(fig. 3.1). Based on this interpretation of the process of debugging tests, 
the following notations are introduced: 

H{Hi, H 2 ,. . .) are stages of tests; Y {Yi,Y 2 , . . .) are controlled param- 
eters; ?7([/i, t/ 2 ) • • •) are managing influences for test stages; Z{Zi,Z 2 , . . .) 
are adjusting influences for test stages. The named parameters are vec- 
tors. 

The controlled parameters Y are measured or observed parameters, 
which inform us on serviceability of the object. In the debugging the 
object moves from the initial condition A to the final condition B on 
the program trajectory AB. The first stage (from the point A) is chosen 
to not destroy the object, the last stage (to the point B) is carried out 
on the nominal regime or regime with the maximal loading. The object 
is moved from the initial condition to the final through some number of 
discrete steps. 

The object debugging complexity is generally characterized by all or 
by only chosen parameters of processes. The ordered set of the final 
number of parameters is represented by the vector Y. During debug- 
ging this vector describes the trajectory in multi-dimensional space as a 
function of time. Since each parameter has the upper and lower admit- 
ted values at each debugging stage, the trajectory passes inside a plait 
in the multi-dimensional space. The debugging problem is to keep the 
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trajectory inside the limits, and to ensure that at the debugging end the 
plait would be strapped into a point. 

The vector Y may have large dimension, and this is extremely incon- 
venient for debugging management. Bellow we shall apply the operation 
of convolution and use the scalar value as the debugging criteria. We 
shall introduce two criteria of debugging: 

1) The parameter of difficulty of debugging 

2) The non-success risk of debugging Frisk- 

At development of the program of debugging tests we should be pre- 
pared to troubles, by providing ^-corrections, which represent variants 
of constructive and technological decisions. Besides, at development of 
the debugging program the values T, Z, U are determined for each 
stage H. Vectors V, Z, U have large dimension and dealing with them 
may require excessive expenses. For optimal distribution of the limited 
allocated resources for debugging, it is necessary to choose only some 
components of these vectors. For this purpose it is necessary to know 
component costs and possible damages due to their absence. 

The proposed debugging diagram (fig. 3.1) and basic concepts can be 
used for debugging of any complex machines and objects and complex 
technical, technological and organizational systems. As measured and 
observed parameters we can use some parameters, and managing and 
adjusting influences, such as financial resources and actives. 



4.4 Technology of debugging tests 

The object debugging technology is presented by the logically closed se- 
quence of procedures of the knowledge diagram. The following logically 
procedures [42,45,50] are used; forecasting of failures, modelling of ex- 
penses and damages, planning the test program, realization of tests and 
decision-making on correction, based on the test protocol. 

Forecasting. At forecasting stage we make the lists of controlled pa- 
rameters y, managing influences f7, adjusting influences Z and stages 
H of debugging tests. Based on the object parameters and restrictions 
of specifications and opinions of experts, the possible failures and dam- 
ages at stages of debugging tests and dangerous values of the controlled 
parameters Fi, I 2 , • • ■ > Vfc are defined. 

Modelling. At modelling we determine the ratio of expenses to dam- 
ages for each component of vectors V, Z, U and H. Starting from the 
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values of the ratios we distribute funds allocated for debugging tests. It 
is necessary to take into account not only material damages, but also 
losses of time in the case of destruction-failures and restriction-failures. 
After solving the problem of optimal distribution of resources we deter- 
mine components of vectors Y”, Z, U and H which will be used. Thus, 
we find the structure of the debugging test program. 

Planning. In planning at stages H we determine numerical values for 
the controlled parameters Y and managing ones U and for the adjusting 
Z influences usually, for eliminating possible destruction-failures and 
restriction-failures. 3-5 values for each adjusting and managing influence 
are provided. 

Testing. At debugging tests we apply the adjusting influences Z, 
if destruction-failures or restriction-failures appear. The records in the 
testing protocol with indication of losses of time and expenses for elim- 
ination of failures are made. 

Processing of test protocols. At processing the test protocols, com- 
paring results of forecasting, modelling, planning of debugging and real 
tests, we specify the following knowledge by the identification methods: 
the models of the object and its elements; the models for estimation of 
expenses and damages; the knowledge on parameters F, I/, Z and H (if 
new components and rules for decision-making were introduced). 

4.5 Non-success risk scenarios of debugging 

Object of debugging. Let us consider scenarios of failures at de- 
bugging tests of free-piston machines. The free-piston generator of gas 
(fig. 4.2, b) produces the gas for a gas turbine. The compressed air of 
the buffer carries out the reverse motion of pistons. 

From compressors the air arrives at the receiver and further at the 
diesel engine, where it is heated up and arrives at the turbine transmit- 
ting the power to a consumer. The free-piston compressor (fig. 4,2, a) 
produces the compressed air. The compressor can have one, two or four 
stages. Distinction of FPM from crank engines and compressors is the 
connection of sizes of engines, compressors and other cavities and their 
processes with dynamics of movement of pistons in the absence of fixing 
position of the outer (o.p) and the internal (i.p.) dead points. 

Non-success scenario of debugging. The feature of debugging 
process of FPM is the impossibility of opportunity of separate debugging 
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of processes in the engine and in other cavities, constructive decisions 
and control systems. It is also not yet known, whether one can obtain 
the necessary parameters of processes in cavities. 

Complexity of debugging is also explained by the fact that the object 
elements (piston and cylinder of engine etc.) are not debugged up yet, 
as well as the system of their cooling. The most first tests can result 
in breakages of these elements. On the other hand, debugging of these 
elements and systems of their cooling should be carried out later with 
satisfactory process in the engine in regime closely approximating the 
nominal one. 

At debugging there is multi-dimensional space of dependent param- 
eters: managing and adjusting influences, geometrical and working pa- 
rameters, deviations from the norm of cavities air- tightness, coaxiality of 
cylinders and guide of synchronizing mechanisms; insufficient check out 
of fuel equipment, automatic valves of compressors, details of cylinders 
and pistons, being not run-in of the mechanism of movement, labyrinth 
of packing of valves; technological and constructive defect of details and 
units. Under action of these random factors it is difficult to find the true 
reason of breakage and to make the correct decision for elimination of 
defects. 

Because of features of piston movement, at the debugging beginning 
the compressor valves may have gas-dynamic losses, considerably dis- 
tinguished from expected ones, or the limited resource. In view of this 
reason the fuel equipment, in spite of testing on the special stand, may 
have characteristics, that essentially differ from expected ones. 

At debugging, random factors essentially influence organization of 
working processes in the object. These factors are the following: non- 
coaxiality of cylinders of the engine, compressors and directing rack- 
cutting of the synchronizing mechanism; non-air-tightness of cavities 
etc. The numerical characteristics of these factors are random variables. 

At debugging the fuel equipment condition is also a random variable, 
When it is installed, the air may throw into the system. By fastening 
the fuel injector it is possible to cause deformation of its body, that will 
result in the jam of plunger or the fuel injector needle at heating-up. 
Change of sprayer characteristics after some operating time is possible 
too. For the combustion chamber the sprays are not designed yet even 
for the given i.p. ando.p. dead points. The combustion chamber may be 
narrow or wide, and the spring of the fuel injector needle, determining 
fuel injection and the dispersion quality, may not correspond to the 
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Figure 4.2. The principal schemes of free-plunger compressor (a) and free-plunger 
gas-generator (b): 1. plunger; 2. compressor; 3. windows; 4. diesel; 5. sprayer; 

6. windows; 7. plunger block; 8. pressure keeping valve; 9. buffer 

pressure of combustion Pz 

During debugging the friction force may exceed the design value 
because the movement group being not run-in. Therefore, the fuel feed 
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will increase and the excess air coefficient for combustion will decrease. 
At debugging the gaseous exchange may be unsatisfactory because of 
small value of the piston pass. 

Thus, the final event Y will take place (failure or destruction of the 
object), if any one, or any two,. . . , or all from the following derivative 
events Si happen: is the breakage of rings and crosspieces between 

flutes of rings in the engine piston, S 2 is the burning of the piston and 
the sprays, S 3 is the coking of rings and sprays, 54 is the failure of the 
fuel equipment, S 3 are fins of cylinders and guides, Sq is the breakage 
of the automatic compressor valves, S 7 are other defects. 

Non-success risk scenarios of system debugging. The failure 
of the complex object is caused by failures of its systems, mechanisms, 
units and details, which in their turn are caused by some factors. Let 
us describe the action scenarios of these factors. 

Xiis the excess air coefficient for combustion (a). The more is the 
value a, the more is the probability of normal realizing of combustion 
process, even if the fuel equipment is badly adjusted and is great the air 
leakage between cavities are large. Naturally, the blow off air factor Lp 
must not be less than 1.3-1. 4 even for large values of the factor a. 

X 2 is the cycle dynamic parameter (N). The less is the number of 
cycle N, the more is the reliability of compressor valves, the less are 
inertia force and deterioration, the better are conditions of work of the 
fuel equipment and synchronizing mechanism. 

A 3 is the mechanical intensity parameter (Pz ). The less is the value 
of maximal combustion pressure Pz the less is the probability of breakage 
of rings and straight arch between flutes in the piston, the less is the 
intensity of details of the fuel equipment. 

X 4 is the thermal stress criterion (Pt)- The less is the value Pt, 
the less is the probability of failure of cylinders, pistons and fuel equip- 
ment. The research of temperature fields and thermal stress of pistons 
and cylinders with purpose of their debugging become possible, when 
the processes in FPM have satisfactory condition. The value Pt is de- 
termined by the function of the average piston speed Cm, the engine 
cylinder diameter D, pressure and temperature of air Pgffig in the blow- 
ing receiver, the display pressure Pid and fuel rate Gi [42,49]. 

X 3 is the fuel equipment faultiness. In FPM all the fuel is injected 
and burned up to i.p. Because of the large part of the lost piston stroke, 
slowly movement of pistons in o.p., and change of the form of the com- 
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bustion chamber, the problem of fuel mixing is difficult, despite of the 
high values a = 2-2.3. The faultiness of the fuel equipment results in 
the following defects: engine overheating, pistons and cylinder burning, 
sprayers firing, rings and sprayers gumming-up, engine ring elasticity 
loss, start-up absence, bad work of the stabilization system of places i.p. 
and o.p., sprayer needle lagging. 

Xq is the non-air-tightness. In FPM the working gas is the air pass- 
ing consistently from one cavity into another one. The air passes the 
compressor, the blowing receiver, the engine, the gas receiver and the 
gas turbine. The cavities are isolated from each other with the help 
of valve boards, the stuffing-box. The flow-over from one cavity into 
another are serious barrier for the debugging. At bad air-tightness the 
following defects are revealed: the increased gas temperature in the tur- 
bine, the overheating of cylinders and pistons, the process deterioration 
in the engine because of the small value a, pistons and sprays burning; 
engine ring elasticity loss; the bad work of stabilization system of places 
i.p. and o.p. The loss of tightness occurs also because of breakages of 
valves. The standards of tightness are difficult to fix beforehand; they 
vary in process of running-in of valves, rings and other details. We can 
estimate a degree of tightness by measuring speed of filling in cavities 
by air before start-up using indications of manometer. For check of 
tightness of cavities, the air from extraneous sources may be used. 

X 7 is the non- coaxiality. When the engine cylinders, the compres- 
sors, the buffers and directing of the synchronizing mechanism are non- 
coaxial, the following failures can happen: the scuffing of these elements, 
the deterioration of stuffing-box; shift of the engine cylinder; shift of 
guides of the synchronizing mechanism with blocking of channels for 
greasing; the difficulties in start-up because of the large forces of fric- 
tion; the breakage of system of start-up and impacts of pistons to the 
valve board because of high pressure of the starting air. The defects 
elimination requires big expenses. If the checking of coaxiality is not 
performed, then wrong decisions are selected. They consist in excessive 
increase of the durability of details and units or changing of their design. 

Xs is the i. p. and 0 . p checking. The checking of limit positions 
of pistons is one of basic problem at debugging FPM. It is carried out 
by means of the rotary barrel and the rod, on which end the pencil is 
mounted. The piston stroke change from cycle to cycle is recorded. It 
allows us to establish the i. p. distance, at which occurs stably the first 
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flare; to determine pressure of starting air, to And out the reason of a 
stop of the machine after several cycles (for large i. p. distance this 
is a small distance of compression, for small o. p. distance this is the 
non-sufficient opening of blow off windows); to establish the place of 
pistons after flare; to adjust value of fuel feed; to uncover scuffing in 
mechanisms of movement in the first 15-40 seconds after start (then the 
positions of limit points are unstable); to adjust the system of regulation 
to work with low flare pressure Pz- At the initial stage of debugging the 
stabilization system is not adjusted because of considerable air leakage, 
losses on friction, and bad combustion. The stable work occurs at the 
large degrees of compression and the big pressures Pz = 15-21 MPa. 
Thus, the combustion chamber has the adverse form and the fuel flames 
get to the bottoms of the pistons. The sprayers and pistons are burned, 
the crosspieces between flutes in pistons and rings are broken. At the 
first stages of the debugging, it is forbidden to work with Pz higher than 
11.5-12 MPa. 



4.6 Structural and LP-models 

of debugging non-success risk 

Scenarios of object’s failures, systems, units, mechanisms and details 
allow us to construct the structural model or graph-model of debug- 
ging non-success risk. An example is shown in fig. 4.3; the random 
events correspond to the object condition T, to the element condi- 
tions 5i, 52, 5a, 54, 5*5, 56, ^7 and to the factors Xi, X 2 , . . . , Xu. We 
designate this events as logic variables using the same letters. The fi- 
nal event Y (failure) occurs, if any one, or any two, . . . , or all events 
5(5i, 52, 5s, 54 , 5s, 56, 5r) occur. In their turn, these derivative events 
are caused by the factors or initiating events X(Xi, X 2 , . . . , Xu). Let us 
construct the graph-model of the debugging non-success risk (fig. 4.3). 
The risk graph-model has logic connections OR, each of initiating events 
Xi, X 2 , . . . , Xii causes some derivative events 5i, 52, ■ • . , 57 . The non- 
success risk graph-model may be more complex and has the logic con- 
nections AND, OR, NOT and cycles [2]. 

Using the risk graph-model, we write down the non-success risk logic 
model of debugging non-success risk 



y = 5i(Xi, . . . , Xn) V 52(Xi, . . . ,Xn) V ... V 57(Xi, . . . , Xn). (4.2) 
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Figure 4.3. Graph-model of the failure risk of the complex debugging object: 
free-plunger compressor 



This risk logic model may be written down in the orthogonal form [2,7] 

Y = SiV S2S1 V SSS2S1 V . . . , ( 4 . 3 ) 

and as the non-success risk probabilistic model of debugging 

Pr^sk = P{Y - 1} = Pi + P 2 (l ~ Pi) + P 3 (l - P 2 )(l - Pi) + . . . (4.4) 

where Pi, P 2 , . . . , P 7 are probabilities of events Si, S 2 , ■ . - , S 7 . 

In order to use (4.4) for quantitative estimations of the debugging 
non-success risk at development of the debugging program and object de- 
bugging management it is necessary to know the probabilities of the initi- 
ating events Xi, X 2 , . . . , Xu for each of derivative events ^i, ^ 2 , . . . , S' 7 . 
Let us consider approaches and methods for determination of the named 
probabilities using the statistical data from the protocols of previous de- 
bugging tests of similar objects. 

4.7 Complexity of debugging 

Criterion of of debugging difficulty. Let us define the techni- 
cal and economic weights of conditions Sj,j = 1,2, ...,7 and factors 
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Xi,i = 1,2,. ..,11 (Table 4.1). The total cost of the j-th condition for 
debugging process is determined by the formula: 

N 

A^ = Y^(C,T, + Q,), (4.5) 

^ = 1 

where 2 is the number of a condition occurrence; is the time of the 
break of debugging process; Cz is the cost of losses because of the break; 
Qz is the cost of restoration. 

The cost weight of the event Sj are determined from the following 
expression: 



7 7 

Bj=A,lY^Ay, = (4.6) 

1 1 

The weight Bij (Table 4.1) of the factor Xi regarding the event are 
given by the method of expert estimation. The weight of the factor with 
regard to all conditions are determined by the formula: 

11 

= = (4.7) 

j^l i 

The factor-events X^,Xq^Xj,Xs are random events; their importance 
is significant: the group weight of these factor-events is equal to = 
0.3135 (Table 4.1). It is necessary to reduce essentially the group weight 
of these factor-events by development and realization of a complex of 
special actions on the stand. The factors X^^Xq^Xt^X^, thus, get to 
the category of strictly controlled ones. 

We cannot actively influence the factor-events X 9 , Xio, Xn\ they are 
found and eliminated during debugging. The factor-events Xi, X 2 , X 3 , X 4 
have the high group weight B\-^ = 0.3935. 

It is possible to weaken influence of these factors choosing the ap- 
propriate strategy of debugging. Namely, one needs to work in the most 
favorable regimes, in order to get the best conditions for organization of 
working process, to reduce the tension of details, consecutively to pass 
from one test stage to another one. 

The criterion of the object debugging difficulty on the factor-events 
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Xi,X 2 ,Xs,X 4 [42,45,49] is equal to 

^diff— (^ 1^1 + U 2 X 2 + uaXs + 0 , 4 X 4 , (4-8) 

where: < 31 , 0 : 2 , 03,04 are the normalize<i weights of the factor-events 

Xi,X 2 ,Xs,X 4 , taken from Table 4.1; Xi ^,X 2 ,Xs,X 4 are values of 
the factors Xi,X 2 ,X 3 ,X 4 regarding nominal regime. 

The criterion of debugging difficulty Kdiff depends on managing and 
adjusting influences at stages of debugging, and it is determined (by 
calculated or measured factors Xi ^ , X 2 , Xg, X 4 ). The criterion (4.8) 
demonstrates the arithmetic addition of actions of the factor-events with 
their weights. 

The reduction of the thermal and dynamic intensity of FPM is 
achieved by reduction of cyclicity and increasing the coefficient of excess 
air for combustion in the engine [48,50]. 

The reduction of cyclicity is achieved by increasing of the piston 
weight, reduction of compression degrees in the engine, buffer and com- 
pressor. Thus, the thermal intensity of the engine, the inertial forces 
in the moving mechanism and the fuel pump are brought down and the 
resource of the compressor valves is extended. In order to increase a it is 
necessary to reduce the dead space of the compressor or the pressure of 
compression, to cool the air in the receiver, to add the air to the blowing 
receiver from an auxiliary source. 



Criterion of non-success risk of debugging. Let us also use 
as the debugging criterion the non-success risk of debugging (4.4), con- 
structed with on the risk structural model (fig. 4.4). This criterion 
demonstrates the logic addition of events. 

We remind that because of using estimation by experts and in view of 
formula (4.8) features, weights in Table 4.1 have the following properties: 
the weights Bj, j = 1, 2, . . . , 7, in the sum are equal to 1; the weights 
Bij, j — 1, 2, . . . , 7; i ~ 1, 2, . . . , 11, in the sum are equal to 1 for any 
j — 1, 2, . . . , 7; the weights Bi, z = 1, . , . , 11 in the sum are also equal 
to 1. 

Now, for risk calculation, as probability of non-success of debug- 
ging, we abandon the artificial conditions of normalization of the weights 
Bj^Bij, Bi in Table 4.1 and pass from these weights to the corresponding 
probabilities Pj , Pij , Pi. 
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Table 4-T Weights of conditions Bj and factors Bji 



Name of 
conditions, 


Weight 

conditions, 

Bi, 


Factors, Xj 


a 


n 


Pz 


Pt 


Xi 


2f2 


X 3 


X 4 


Breakage of rings 
and crosspieces 


0.11 


0.05 


0 


0.35 


0 


Burning of the piston 
and the sprays 


0.25 


0.2 


0 


0.05 


0.02 


Coking of rings 
and sprays 


0.08 


0.25 


0 


0 


0.25 


Failure of the fuel 
equipment 


0.18 


0 


0.2 


0.27 


0 


Scuffing of cylinders 
and guides 


0.13 


0 


0.15 


0 


0.1 


Breakage of the compressor 
automatic valves 


0.10 


0 


0.8 


0 


0 


Other defects 


0.15 


0 


0 


0 


0 


Weight of initiating 
factors, B^ 




0.0755 


0.1355 


0.0996 


b.083 


Group weight of factors, B 


- 


Bi _4 = 0.3935 



Continuation of Table 4B 



Factors, Xj 


Fuel 

equipment 


Air- 

tightness 


Coaxi- 

ality 


Checking of 
i.p, & o.p. 


Const- 

ruction 


Tech- 

nology 


Geometry 

FPM 


^5 


^6 


w 


^8 


2^:9 


Wo 


Wi 


0 


0.05 


0 


0.35 


0.1 


0.05 


0.05 


0.15 


0.095 


0.025 


0.05 


0.11 


0.05 


0.07 


0.175 


0,175 


0.025 


0 


0.05 


0 


0.075 


0.2 


0.1 


0 


0.075 


0.08 


0 


0.075 


0 


0 


0.7 


0 


0.05 


0 


0 


0 


0 


0 


0 


0.1 


0.1 


0 


0 


0 


0 


0 


0.7 


0.3 


0 


0.0875 


0.0623 


0.09925 


0.0645 


0.1884 


0.073 


0.0425 


B 5 - 8 . = 0.313 


Bq-io = 0.261 


Bu = 0.042 



We shall take into account only the factor-events Xi , X2, X3 , X 4 since 
the factor-events are considered as strictly controlled 

ones and we cannot actively influence the factor-events Xg,Xio,Xii — 
they are to be found and eliminated during debugging. 

Earlier it was already pointed out that efficiency coefficient of the 
debugging process (4.1) is equal to 77 = 0.05-0.12. Therefore, we accept, 
for definiteness of statement, that the non-success risk of debugging 
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is equal to Frisk — = 1} = 1 — ?? = 0.925 under action of all 

factor-events Xi, X2, . . . , Xu. If we take into account only the controlled 
factor-events Xi,X2,X3,X4, then the non-success risk of debugging is 
equal or proportional to their group weight B 1-4 — 0.3995 in Table 
4.1. Thus, the non-success risk of debugging only from action of the 
factor-events Xi,X2,X3,X4 is equal to Pi_4 = Frisk * -^1-4 = 0.354. 



Let us construct Table 4.2 with the probabilities of condition-events 
Si, S 2 , Ss, S 4 , 5s, Sq, factor-events Xi, X2, X3, X4 and the factor-events 
with regard to the condition-events. At that, we do not consider the con- 
dition Sj, which means other defects, as it does not depend on the factors 
Xi, X2, X3, X4. The probabilities of the condition-events Fi, F 2 , . . . , Fq 
are calculated proportionally to their weights Bi, B 2 , . . . , Bq and taking 
into account the following expressions: 

r = V 52 V ^3 V A4 V V 5e; 

Pr^sk - Pi + P2 • (1 - Pi) + P3 • (1 - Pi)(l - P2 + . . . = 0.354. 



Probabilities of the factor-events Fij, j — 1, 2 , . . . , 6; z = 1 , 2, . . . , 4 
are calculated proportionally to their weights Bij and taking into ac- 
count the following expressions: 

5^3=Xi VX2 VX3VX4; 

P{ 5 , = 1} = P,1 + P,2 ■ (1 - Fii) + Fis • (1 - Pi2)(l - Pi 3 + . - . = Pi, 

z = 1,2,...,6. 

For debugging stages, the non-success risk is calculated from expression 
(4.1) as follows 

Prisk = P{y = 1 } = Pi + P2(l - Pi) + . . . 

+ P6(i - u)(i - a)(i - Pi)(i - -P4)(i - a). 



where the probabilities Fij vary proportionally to values of the fac- 
tors Xi,X2,X3,X4 corresponding to the nominal regime, analogously 
to (4.1). The calculations were made using Excel program (Table 4.2). 
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4.8 Development of the debugging program 

The debugging stages of the free piston gas generator were curried out 
at the gas pressure in the turbine Pg ~ 0.415 MPa. Their complexity 
was estimated by both the debugging difficulty criterion (4.1) and the 
debugging non-success risk criterion (4.4). As the measurable manag- 
ing influences U were chosen the compression degree in the engine 
the piston stroke S-max-, fiie linear value of the dead space of the com- 
pressor Ck, the cooling blow off air dTcooh These influences are done 
respectively: by changing of the initial pressure in the buffer and fuel 
feed cycle, by changing of the dead space of compressors and cooling the 
blow off air. 

The managing influences have the upper and lower limits of change, 
defined by the condition of stability of work or practical possibility of 
influence realization. The test regimes were calculated by numerical 
modelling on a computer [42, 50] with determination of parameters of 
working processes in all cavities, dynamics of movement of pistons and 
thermal loading of cylinders and pistons. 

The working processes in the cavities and pistons dynamics are de- 
scribed by a system of ordinary differential equations with variable co- 
efficients, which is solved by numerical integration cycle-by-cycle up to 
convergence. The equations are obtained on the basis of the laws of con- 
servation energy, mass and impulse and take into account processes of 
fuel combustion, heat exchange, intake and discharge of the gas and the 
air through the valves and the engine windows, leakage through rings 
and stuffing-boxes. The total number of the equations in the system 
depends on the object design and can reach one hundred; the time of 
the calculation of one regime of object operation takes 1-2 hours on PC 
of Pentium’s type. 

The calculation results are the following parameters allowing both to 
check the correctness of the calculation and to calculate the debugging 
criterions (Table 4.4): E^ is the compression degree in the engine, dTcool 
is the blow off air cooling, Smax is the piston stroke, Ck is the value of 
the linear compressor dead space, cp is the excess blow off air factor, N is 
the cyclicity, Pz is the maximal combustion pressure, Pt is the criterion 
of thermal stress, Pin is the average display pressure in the engine, Tg is 
the temperature of the gas in the turbine; Q is the fuel feed for a cycle; 
rjs is the adiabatic coefficient of efficiency; Qw is the relative losses of 
heat; is the relative dead space of the compressor; ^ is the factor of 
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Table 4-2. Probabilities of condition-events and factor-events 
(the last stage of debugging, Prisfc— 0.354) 



Name of 
conditions 
events, Sj 


Probabilities 
of event- 
conditions, Pj 


Factor-events 


a 


N 


Pz 


Pt 


Xi 




Xs 


X4 


Breakage of rings and 
crosspieces 
in the piston, Si 


0.0542 


0.0068 


0 


0.0476 


0 


Burning of the piston, 
cylinder and sprays, 52 


0.1232 


0.094 


0 


0.0235 


0.0094 


Coking of rings 
and sprays, 5s 


0.0394 


0.0197 


0 


0 


0.0197 


Failure of the fuel 
equipment, 54 


0.0887 


0 


o 

O 

OO 

oo 


0.0521 


0 


Scuffing of cylinders 
and guides, 5s 


0.0641 


0 


0.0391 


0 


0.026 


Breakage of the 
compressor automatic 
valves, Sq 


0.0493 


0 


0.0493 


0 


0 



Table 4-3. Numerical modelling of possible modes of debugging 





Controls 


Solutions 


Regime 

number 


Ed 


grad K 


Smaxi 

m 


m 


a 


T 


N, 

1/min 


Pz, 

MPa 


Pt 


1 


10 


0 


0.176 


0.01 


1.6 


2.51 


1494 


13.8 


8.64 


2 


9 


0 


0.176 


0.01 


1.7 


2.46 


1470 


12.7 


8.16 


3 


8 


0 


0.176 


0.01 


1.78 


2.3 


1415 


10.7 


7.59 


4 


7 


0 


0.176 


0.01 


1,87 


2.28 


1370 


9.0 


7.0 


5 


10 


0 


0.935 


0.01 


1.9 


2.33 


1509 


13.3 


7.6 


6 


10 


0 


0.855 


0.01 


2.43 


2.01 


1567 


13.0 


6.49 


7 


10 


0 


0.795 


0.01 


2.53 


1.78 


1616 


12.6 


5.86 


8 


7 


0 


0.935 


0.01 


2.2 


2.01 


1400 


8.9 


6.41 


9 


7 


0 


0.855 


0.01 


2.7 


1.79 


1430 


8.5 


5.48 


10 


10 


0 


1 


0.015 


1.85 


2.31 


: 1485 


13.8 


I7.49 


11 


10 


0 


1 


0.027 


2.8 


4.75 


1435 


12.6 


' 5.09 


12 


7 


0 


1 


0.027 


3.18 


1.5 


1322 


8.0 


4.39 


13 


10 


150 


1 


0.01 


2.75 


1.85 


1516 


14.5 


5.34 


14 


7 


150 


1 


0.01 


3.3 


1.57 


1401 


9.6 


4.4 


15 


7 


100 


1 


0.01 


2.88 


1.73 


1396 


9.5 


4.98 


16 


10 


50 


1 


0.021 


2.7 


1.83 


1467 


13.5 


5.33 



completeness of fuel combustion in the engine, N is the power of engine. 
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Continuation of Table 4-3 





Solutions 


Regime 

number 


Fin. 

MPa 


grad K 


g*io^^ 

kg 


Vs 


Qw 






N, 

kvt 


Fdiff 


1 


0.99 


820 


0.25 


0.382 


0.212 


0.13 


0.892 


99.6 


1.0 


2 


0.97 


809 


0.24 


0.39 


0.213 


0.134 


0.905 


95.6 


0.952 


3 


0.91 


791 


0.225 


0.383 


0.221 


0.145 


0.916 


85.6 


0.881 


4 


0.86 


785 


0.213 


0.379 


0.23 


0.163 


0.929 


77.2 


0.814 


5 


0.96 


772 


0.211 


0.385 


0.22 


0.141 


0.931 


86.0 


0.941 


6 


0.91 


730 


0.178 


0.404 


0.227 


0.149 


0.98 


74.3 


0.886 


7 


0.85 


746 


0.15 


0.379 


0.254 


0.165 


0.987 


63.2 


0.871 


8 


0.83 


755 


0.183 


0.384 


0.212 


0.172 


0.964 


68.4 


0.786 


9 


0.77 


718 


0.145 


0.393 


0.25 


0.191 


0.995 


56.6 


0.733 


10 


0.91 


785 


0.217 


0.388 


0.223 


0.152 


0.924 


87.5 


0.945 


11 


0.65 


695 


0.113 


0.389 


0.275 


0.233 


0.995 


55.9 


0.797 


12 


0.55 


698 


0.126 


0.376 


0.294 


0.267 


1.0 


44.1 


0.65 


13 


0.99 


612 


0.2 


fi.352 


0.406 


0.13 


0.98 


75.0 


0.853 


14 


0.87 


604 


0.177 


0.352 


0.41 


0.163 


1.0 


60.3 


0.698 


15 


0.87 


650 


0.181 


0.367 


0.343 


0.163 


1.0 


64.7 


0.724 


16 


0.76 


675 


0.165 


0.38 


0.306 


0.191 


0.99 


64.0 


0.83 



Taking into account the computed values of the debugging difficulty- 
criterion Kdiff and the expedient sequence of exception of constructive 
changes at the debugging stages, connected with cooling of the blow 
off air and increase of the dead space of the compressor, the debugging 
stages are obtained and they are given in Table 4.3. The last n-th stage of 
debugging is the nominal mode. Ten debugging stages are chosen; they 
are placed with gradual increase of the debugging difficulty criterion 
Kdiff. The calculated values of the debugging non-success risk criterion 
Frisk are given in the same table in the last column. 



The management of debugging process by criteria K^iff and Frisk 
allows us almost to halve the complexity of the first debugging stage in 
comparison with the last debugging stage. The ranges of change of the 
logic debugging non-success risk criterion F^sk is 0.235-0.354. Naturally, 
it is appreciably lower than ranges of change of the arithmetic debugging 
difficulty criterion Kdiff = 0.488-1.0. 
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Table 4 ■4- Stages of debugging tests of the complex object 



Stages 

debugging 


Values of controlled actions 


Criterion 
of difficulty 
debugging 
Ediff 


Criterion of 
non-success risk 
debugging 

Prisk 


Ed 


S-max ) 

m 


dTcooi ) 
grad K 


Ufc, 

m 


10 


10 


0.1765 


0 


0.0105 


1.0 


0.354 


9 


9 


0.1765 


0 


0.0105 


0.952 


0.3410 


8 


8 


0.1765 


0 


0.0105 


0.881 


0.3284 


7 


7 


0.1765 


0 


0.0105 


0.814 


0.3152 


6 


7 


0.164 


0 


0.0105 


0.786 


0.3027 


5 


7 


0.15 


0 


0.0105 


0.733 


0.2893 


4 


7 


0.15 


0 


0.0147 


0.6925 


0.2764 


3 


7 


0.15 


0 


0.0273 


0.5785 


0.2632 


2 


7 


0,15 


50 


0.0273 


0.54 


0.2501 


1 


7 


0.15 


150 


0.0273 


0.488 


0.2352 



Conclusions 



The poor-quality technology of complex object debugging results in the 
large losses of means and time at the debugging and opportunity of 
failures and accidents in the operation. 

The essence of debugging tests is defined as the search and elimina- 
tion of errors in the object project. The principles of debugging man- 
agement are stated. Scenarios and graphs of debugging management are 
considered as the complex object management. The debugging technol- 
ogy procedures are described. 

The scenario failure examples and construction on their basis the 
structural, logic and probabilistic models of debugging non-success risk 
and the test program are given. 

The management criteria of debugging process and construction of 
the debugging program are proposed. They are the debugging difficulty 
criterion and the debugging non-success risk. 

The obtained results can be used for management of debugging or 
development of complex machines and objects, and complex technical, 
technological and organizational systems. 



4.9 Risk management 
in operating tests 

Usually there is a lot of annoying surprises after starting operation of a 
complex system (CS), despite the fact that it was tested in laboratory 




88 E. D. Solojentsev 



environment. The developers of systems and equipments become more 
and more aware of this fact. And they are inclined to the idea that the 
test programs of new complex systems should be more detailed and the 
tests should be performed in the actual operation environment. They 
wish that tests are carried out by staff, whose qualification is same as 
that of a real user. 

Management by operating tests is implemented under the same scheme, 
which we described above for debugging tests. We also forecast fail- 
ures and develop non-success scenarios, distribute resource for tests and 
generate the test program. Therefore below we will only consider the 
problems which are specific for operating tests. 

Forecasting of non-success and scenarios. The debugging op- 
erating tests and estimation (OT and E) include processes of prediction 
and planning of tests [51,52]. There are critical questions (CQ), for 
which answers can be found at operating tests. 

In the past operating tests started with preparation of detailed de- 
scriptions, in which each characteristic of the system was detailed and 
criteria were established, which the given system should meet. The final 
stage of this methodology was the formal test of the system for deter- 
mination of its compliance to the required characteristics. 

However, soon it became apparent that this type of test program 
is unsatisfactory. Products often corresponded to all characteristics at 
tests, at the some time not functioning as expected. A car, for example, 
could correspond to any of hundreds detail technical conditions, at that 
being not demanded in the market, because the buyers could find that it 
is inconvenient or complicated in control. On the contrary, some product 
could not comply with some characteristics, but it completely satisfied 
its functional destination. 

Now the necessity of new type tests becomes evident; in these tests 
a given system, including equipments and personnel, is tested in con- 
ditions, to the maximum approximating real operating conditions. It 
allows us to define, if the system correspond to its destination. 

For the first time, the necessity in “OT and E” became obvious when 
it was necessary to deal with complex military systems. 

The operating tests and estimation have four main purposes: 

1. To define, whether a system together with its operators, staff and 
auxiliary equipments executes current tasks and corresponds to given 
purpose. 
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2. To develop methods and to find modes of optimal exploitation of a 
new system or new usage of old system for solution of new problems, 
or appropriate matching of old system to new equipments. 

3. To establish limitations, characteristics and capabilities of a new sys- 
tem to make easier its being introduced in existing structure of man- 
agement and to establish requirements to staff, material and technical 
supply. 

4. To obtain information, which will help in research and development 
of new systems, by documenting solutions for functional improvement 
of functions, and by documenting all detected defects of system op- 
eration in the testing period. 

Debugging of many objects at one time is rather labor-consuming. 
For example, at design of cars in USA and Japan up to 20 thousand pa- 
rameters are debugged and at that it is necessary to distribute optimally 
funds and time for debugging. 

The concept of CQ is an approach for forecasting possible errors in 
the project and for controlling uncertainties in functional abilities of the 
complex system. There are such critical questions: 

• How well does the CS execute the tasks, which it is intended to do? 

• Can the CS be provided and supported in exploitation ? 

• How sound is the critics of CS opponents, doubting in its capabilities? 

Elimination of the critical questions is essential for success of the CS. 
Many CS fail after start of operating because not all critical questions, 
connected with their functions, were realized and answered. 

Methodology of critical questions. The critical questions are 
expressed in the form of questions to CS, which take into account argu- 
mentation and uncertainty of capabilities of operational efficiency, prac- 
ticality, effect on environment, etc. It is always necessary to clear up 
why the CQ emerge and what they mean in fact. 

Ideally, conditions of suitability of the system are described by a set 
of characteristics in specifications. However, many characteristics are 
compromise, especially factors of profitability, weight and safety. As a 
result, the system can correspond to specifications and badly execute its 
functions and vice versa. 

The critical questions are split into two categories: 
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• Questions of operating and technical nature (is 6 litters of fuel suffi- 
cient for 60 kilometers of run of a car?); 

• Questions of operating and political nature (can equipments for com- 
mercial network of car service be built?) 

For each CQ it is necessary to ask: “Is this question critical con- 
cerning problems, operations or system approval or it represents only a 
component of information required for decision-making in a wider ques- 
tion?”. 

When the CQ are posed, then defects of the CS can be uncovered 
and corrected, and it is possible to optimize modes of exploitation (to 
train operators, to organize manufacture of service tools, to organize 
material and technical supply). 

The critical questions create the basis for structural analysis meth- 
ods, establishing lists of necessary computational and experimental re- 
searches at design and necessary measurements at tests, and the base 
for detail planning of design activities and tests. 

The analysis of experience by creation and tests of some objects 
demonstrates that, 

• Test programs, which started from definition of the CQ and their usage 
for test planning, were useful and reliable; 

• Test programs, which were planned on the off-chance, without defini- 
tion of the CQ, were not useful and often did not detect CS defects, 
which were found out later at actual system operation. 

The critical questions are developed in two stages: 

• Definition of a circle of questions, which can be critical ones; 

• Discussion of each of these questions for estimation of its real critical- 
ity. 

Outcome of these stages is the CQ list, which demands obtaining 
extra information for answering the questions. 

Sources of critical questions. The sources of critical questions 

are; 

• Retracing the CS activity when carrying out given operations, fol- 
lowing the stream of information and CS functioning in the typical 
operation conditions. At each step it is asked: what requirements are 
made to the corresponding operation at this point? 
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• Discussion of the CS with the people, who are well familiar with design 
of the system or usage of similar systems. There are common problems 
for all objects and their test programs in the given field and these 
problems are known to professionals. 

• Studding all documents corresponding to project to tabulate CS func- 
tions, requirements to it and its characteristics. Putting questions to 
the CS or critical remarks will allow us to consider all these questions 
and to collect facts for solution of discussed questions. 

Not each question is the CQ for tests. To clear up it, it is necessary 
to answer the following questions: 

• Whether this question is still unsolved? If it has already been solved 
finally by research or administration, then it is not critical. 

• Whether this question is really critical? The best way to evaluate 
criticality of the question is to find out all possible answers, which 
can give tests of the system behavior as the whole. If differences in 
behavior of the CS are little for all the set of answers, this question is 
not critical. 

• Whether tests can give an answer to this problem? The question 
can be important, but tests might not be able to answer on it and 
consequently it is not critical. For example, the question, whether 
means will be available for operational service of the system in the 
time of its activity, cannot be answered at tests. 

• Whether tests are the best way of solution of the question? If it is 
possible to use analysis, simulation, modelling at the design stage, 
then this question should not be included in the list of the CQ for 
tests. 

The critical questions can appear during the whole project stage. 
This results in correction of the test program. Thus, CQ definition is an 
evolutional process, which continue during all the time of “OT and E” 
program. Tests and discussions bring upon new CQs. 

Usage of critical questions. If CQ are determined, it is necessary 
to create a test program with the purpose to collect information for 
answering each critical question. Each test can answer one or more 
critical questions. The more questions can answer the test, the higher 
is the efficiency of the test. The time of solution of CQs depends on 
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question. Some CQ demand solution at the earliest stages of the creation 
process of the CS. 

Test tools can be very diverse, including special test stands, multi- 
factor experiments, special tests in conditions of high noise and vibra- 
tion, simulation, modelling, different kinds of analysis. There are many 
ways for using these various means for obtaining desirable information 
as correct and reliable as possible [51-53]. 

The CQ usually cannot be answered by a single measurement during 
tests. Contrary, separate measurements give answers to different sub- 
questions. All obtained answers need to be grouped together for the full 
solution of each CQ. Therefore, each CQ should be broken into a few 
in-depth questions, each of which, in its turn can be broken into some 
subquestions again. Finally all questions should be sufficiently simple 
to answer them with the help of certain measurements. 

Scenarios and critical questions. Using analysis results of CS 
non-successes in the past, we shall describe some precedents one to not 
stating CQs timely. 

1. A car corresponded to one hundred of detail technical specifications, 
but it did not have a big demand on the market, as the customers found 
it difficult in control. The tested and debugged prototype was heavier, 
than a production sample and therefore had different controllability. 

2. A management system for dispatching a flow from 100 airplanes was 
developed. A computer could control 100 airplanes, the display could 
show on the screen 100 airplanes; but from the computer to the display 
screen it was possible to transmit simultaneously information on 50 
airplanes only. 

3. During the Second World War system analysts were given with the 
problem to increase efficiency of search of submarines by patrol air- 
planes; but analysts established that solving the problem results in 
answering the question how to drown more submarines by patrol air- 
planes. 

4. Carbine M-16, produced in USA, passed all tests and was put into 
production; but in combat conditions of Vietnam it appeared to be 
unreliable as: a) it was used as a crutch during combing of marshes 
and in jungles (hot weather, stuffiness, serpents; mosquito, heavy ruck- 
sacks, etc.), b) it was greased by instructions for the old carbine, c) 
after coming out jungle, soldiers shot using not short, but long burst 
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of fire as required instructions to show they worked well. In these 
conditions the carbine often jammed; after modification these defects 
were eliminated. 

5. The airplane “Concorde” did not found wide application, as during 
solution of complicated problems designers forgot noise standards in 
airports and ozone layer problems, 

6. At design of free-piston machines, experts thought that pistons had 
only the reciprocal motion in cylinders. However, it was found that 
the pistons had also rotatory motion, that results in breaking of the 
synchronizing mechanism. 

7. The light aluminum alloy was used for the pistons of the engine. 
Bridges of piston-rings are guaranteed to resist the pressure lesser 
than Pz <= 8.0 MPa. However, the pressure Pz is a random variable. 
In 1% of cycles the combustion pressure exceeds Pz > 9.0 MPa and 
pistons after short activity are disrupted. 

8. During the Second World War oceans ships were often equipped with 
Radars. However, nobody convinced captains in usefulness of Radars. 
Often it happened so, that the ship prolonged to follow a course leading 
to accident, because the captain did not believe indications of the radar 
and supposed that as he did not see ships nearby, therefore, there were 
no ones. 

Evolutional tests. The complex system are often designed in the 
best way, when efforts are concentrated on solution of one main problem 
from the full list of problems. When this problem is solved, it is possible 
to begin solution of following problems and etc. until the system is able 
to solve all the problems. 

This method has advantages. Already at the earliest stage of tests 
the system is capable to execute some functions. The old rule of system 
architects wisely states: “The system should work before it will be able 
to well work” , “OT and E” can be planned so that tests have evolutional 
characters and are carried out with parallel evolution development of the 
system. In this case we have the extra advantage — during the process 
of creation of the system we can take into account results of tests. In 
this case improvements of the system is cheap. The realization of “OT 
and E” in such a way demands extremely close co-operation between 
system developers and testers. 
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First of all, the schedule of “OT and E” should be aimed at testing 
the main function of the system or a set of functions. Then the aim is 
development, evolution, and modification of the system. The new stage 
is realization of more detailed debugging tests and etc., until the full 
completion of works on the system is achieved. 

Selection of service conditions. In the past the main reason of 
failures of “OT and E” was not taking into account effects of different 
operating conditions on system operation. Exotic conditions of weather 
region, forest cover, geography, temperature, illuminating etc. and com- 
binations of the conditions were the cause of the unique effects on the 
system during its tests. The test results in one environmental conditions 
are completely unsuitable for other conditions. Sometimes this circum- 
stance is apparent. It is not astonishing if in the jeep, which passed tests 
satisfactorily at the environments of the continental zone of USA, the 
oil freezes and it cannot run in temperature conditions of Alaska. 

It is less apparent, why the laboratory measurements of reliability is 
nearly two times large, than ones the system will show in natural con- 
ditions, even when the environmental conditions do not reach extreme 
values. Even more elusive is the fact, that a human body can be severe 
environment; so severe that electronic stimulator of the heart, which has 
service life up to 5 years in laboratory conditions, lives only 18 months 
when it is implanted into a human bod}c These examples demonstrate 
that special factors of environment, which appreciably influences effi- 
ciency of work of the system, is not always easy to find out. Thus, at 
tests it is necessary to use a full set of conditions, in which the system 
should work after the start of exploitation. 

If there are no limitations in the test, then the section of the docu- 
ment regarding the operation conditions, should be simple; in this sec- 
tion it is offered to test the system at all conceivable combinations of 
operating conditions. Unfortunately, it is impracticable. Taking into 
account different available limitations, it is necessary to formulate an 
idea of test in operating conditions. 




Chapter 5 



RISK MANAGEMENT IN OPERATION 
ON BASIS OF MONITORING 



At operation stage an estimation of CS accident risk is made on the 
basis of scenarios by using results of monitoring. The monitoring allow 
us to estimate values of element deterioration, real loads and vibrations, 
operation features, readiness and conditions of the safe operation. The 
quantitative estimation of accident risk allows us: 

• to analyze the CS risk; 

• to accept the reasoned decision on prolongation of safe operation and 
service life of CS; 

• to develop proposals on maintenance of safe operation; 

• to organize the process of personal training for safe operation; 

• to plan acting in dangerous situations. 

Monitoring is the essential part of safety system management of com- 
plex technical, economic, and organizational systems. 

5.1 Destruction, wearing and deterioration of 
equipments in operation 

For constructions and buildings, being in operation for long time, the 
cause of accidents can be degradation of material properties, beyond- 
limit levels of stored damages, appearance of uncontrollable development 
of cracks, cavitation wearing, etc. 
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Table 5.1. Characteristics of using design resource of objects 



Level of resource usage 


Relative number of objects 


More 0.50 


60% 


Up to 0.75 


20% 


Up to 1.0 


15% 


More 1.0 


5% 



During long time operation, CS elements are worn out and age. We 
observe corrosion, active degradation of equipment components, effects 
of corrosion-active substances, effects of such dangerous and harmful 
factors as higher and lower temperature, humidity, vibrations of different 
spectrum and amplitude, etc. Combined simultaneous actions of the 
named factors results in accumulation of rust, appearance of cracks in 
elements of construction and in welds, breakdown of air-tightness of 
flange packing, reduction of insulation resistance of cable lines because 
of aging of polymeric covers etc. 

Potentially dangerous objects and manufactures, as a rule, have con- 
siderable usage of resource (Table 5.1). In the most crucial branches 
(power, petrochemical industry, gas chemical industry) the potentially 
dangerous objects have used resource at a level of 75-90% [18]. In the 
first years of XXI century the amount of potentially dangerous objects 
with the indicated levels of used resource will increase by approximately 
10%. Thus, the required expenses for liquidation of consequences of ex- 
traordinary situations, modernization, renovation, withdrawal of these 
equipments will result in the reduction of gross national product as much 
as to 5-10%. 

Examples. Today, many atomic power stations have high, above 
65%, level of wearing of basic production equipments. Insufficient at- 
tention is paid to modernizing, repair and preventive maintenance of 
equipments. By social causes, the industrial and technological disci- 
pline drops. In the chemical complex, wearing of production equipments 
comes to more than 80%, and about half of long distance pipes have 
been in operation for more than 20 years. Repairing and re-equipment 
of worn-out equipments are much behind of the needs. 



5.2 Monitoring in engineering 

In engineering a typical one is the conflict between reached values of 
operating time of complex technical systems and rigid requirements to 
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quality of their operation during operation. First of all it concerns the CS 
with high cost, unique ones, with a long time of building (nuclear reac- 
tors of power stations and submarines, launcher of rocket systems, power 
equipment etc.). Therefore, it is necessary to create new operation- 
saving technologies [15,54-58]. The monitoring, as information technol- 
ogy, is intended for evaluation of technical condition of the CS and its 
resource, for decision-making on prolonging resource and maintaining of 
safe CS operation with the prolonged resource. 

The essence of the new approach to the safe operation consists in a 
large scale application in industry of monitoring of technical condition 
of the exploited CS in order to obtain timely information about their 
actual condition and to make decision about the order of their further 
exploitation. Thus, the safety of exploitation CS is determined both by 
its technical condition and by readiness of personnel to supply successful 
and safe operation. 

Monitoring of CS exploitation is the process of systematic obtaining 
and initial processing of information about conditions of CS elements, 
affecting factors of environment and the operational processes realized 
in the CS. Further processing of information is used for numerical esti- 
mation of non-success risk of CS with prolonged service life. 

The theoretic basis of CS risk estimation with the help of monitoring 
consists in the following. First, we write scenarios and the risk LP- 
models of accidents which allow us to compute the risk if probabilities 
of initiating events are known. The properties of CS elements change 
with time as they wear out, age and come to ruin. Monitoring fixes 
these changes. For prediction of change of element properties equations 
of mechanics can be used. 

At the stage we also build models connecting properties of elements 
and probability of their failure (changing properties of elements results in 
changing probabilities of their failures). These models can be physical- 
statistical, statistical, and expert ones. Examples of construction and 
usage of such models are given in [56, 57] for components of refuelling 
systems of rocket launchers. Models are built for corrosion damages 
of pipe lines, wears of movable components, aging polymer and rubber 
products, errors of staff at localization of dangerous condition of the CS. 

Thus, we can calculate accident risk for each CS condition by using 
monitoring results, and make decision on possibility of its exploitation, 
prolongation of resource, required repair and replacement of components 
or on impossibility of CS exploitation because of high inadmissible risk. 
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5.3 Monitoring of infrastructure of rocket 
launcher 

The world experience of the space activity testifies to the fact that 
problems of risk estimation and safe operation risk analysis of elements 
of the ground-based space infrastructure (GSI) are urgent. It is also 
necessary to create well-founded methods of achieving required risk 
level [15,56-58]. Basic GSI elements are refuelling stations, technical 
facilities, launcher, measuring stations and other similar objects. 

GSI is the complex system including a set of objects of higher danger. 
Thus, the majority of GSI elements is now exploited on the basis of 
decision on prolongation of resource and service life. The features of 
exploitation of GSI elements at the stage of prolonged service life consist 
in the following. First, the GSI exploitation occurs in conditions of 
degradation of components of the equipment and it is difficult to meet 
the requirements on reliability and safety. Secondly, in a number of cases 
the GSI exploitation occurs in conditions of poor technical readiness of 
tools of safety supply. All this results in decrease of reliability and safety 
of GSI operation, that confirms the urgency of developments, directed 
to creation of methods of risk analysis, safety maintenance, and risk 
management of GSI exploitation. The methods should take into account 
the actual technical condition of equipments and functional condition of 
personnel. 

5.3.1 Scenarios of accident appearance 

For providing safe GSI operation the following problems are solved: 

1. Selection of the risk parameter which allows us to estimate the safety 
level quantitatively; 

2. Normalization of requirements to the safe GSI operation in the se- 
lected parameter; 

3. Development of models for calculation of the risk parameter value of 
safe GSI operation; 

4. Development of technology for obtaining of initial data for the models; 

5. Development of methods for analysis and management of safe GSI 
operation. 
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Figure 5.1. The graph of GSI state 



For quantitative risk estimation of safe GSI operation, a vector pa- 
rameter can be proposed. It is the vector of probabilities of appearance 
of possible accidents: 



^<L> = (5.1) 

Application of such parameter enables to formulate the requirements 
to safe GSI operation with taking into account the level of possible 
damage by various accidents. The GSI application has as its final goal 
(the condition Sk) obtaining some useful effect Cp (for example, profit). 
At the same time, during operation of GSI, there always exists the risk of 
accident appearance and damage of people, environment, equipment of 
the GSI and space rocket. The condition Sp corresponds to the accident 
event and it is characterized by the probability pn and the damage Wp. 
The graph of dangerous GSI conditions is shown in fig. 5.1. 

Following basic principles of the concept “the admitted risk” [2] it is 
possible to state that the risk of safe GSI operation can be considered 
as admitted one in the case when the positive effect from GSI operation 
is more than effect by accident, that is the inequality holds: 

(1 ~~ Pn) ■ Gn > Pn • (5-2) 

The inequality (5.2) reflects only the technic and economic aspect 
of maintenance of safe GSI operation and do not take into account the 
current condition of social relations or, speaking in other words, the level 
“admitted risk” currently accepted in society. For elimination of this 
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flow it seems appropriate to introduce the coefficient of admissible risk 
kad- Transformation of inequality (5.2) with the coefficient kad allows us 
to obtain the maximum admitted probability of appearance of accident 
in the GSI starting from possible damage and expected useful effect from 
proper GSI application: 




^ad^n 

kad^n '^ni 



(5.3) 



where Wm is the possible damage by appearance of /-type of accident in 
GSI. 

The full list of possible accidents on the GSI is found by the method 
of the morphological analysis. For example, for the space-rocket launcher 
“Proton” the full list of possible accidents during preparation and launch 
of the rocket includes 66 items. 

The quantitative estimation of the risk of safe GSI operation is made 
by the binary scheme (if the criterion is realized, then the demanded level 
of safety is ensured) and consists in realization of criterion of suitability: 

G : P^L> e (P^L>), (5.4) 

where is the vector of acceptable values (pf,p 2 » • • • jPi) GSI 

accident appearance probabilities (calculated by (5.3)). 

The criterion (5.4) formally means: 



{ Pi < pi 

G:{ ... (5.5) 

[ PL < pi' 



The components of the parameter P<l> of safe GSI operation are 
probabilities Pi,P 2 , • • • of appearance of accidents. They are calcu- 
lated with the help of models of accident appearances in GSI. The basis 
of these models are so-called “scenarios of accident appearances” . They 
are prepared on the basis of models of the GSI exploitation process and 
formally described by logical and probabilistic functions of accident ap- 
pearances. 

The essence of the approach for construction of models of accident 
appearances in GSI is the following. For the stage i of GSI operation we 
determine all possible accidents, and for each of them we construct the 
scenario of accident appearances. On the basis of this scenario a logic 
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Figure 5.2. The scenario of incident originating 



function Yi of accident appearances is constructed. It permits, by using 
algorithms described in [2], to determine the probabilistic function of 
accident appearances Pi — P{Yi = 1} expressed in terms of probabilities 
of initiating events (initiating events and conditions) of the scenario of 
accident appearances. 

The probabilities of initial events in scenarios of accident appearance 
are calculated as probabilities of their appearance at the considered stage 
of operation. In these models the process of accident appearance is 
considered as consisting of two stages: appearance of the dangerous 
situation and its development as accident. Thus, we take into account 
the possibility of localization of the dangerous situation and prevention 
of damage. The example of the scenario of incident appearance is shown 
in fig. 5.2. 

Main feature of the scenarios of accident appearances is the presence 
of internal “horizontal” connections. This dictates necessity of applica- 
tion of algebra of logic for their formal description. [2] 

The causes of the accident /, possible at fulfillment of the considered 
operation stage, can be presented as events consisting in failure of an 
equipment element (or an operator error) during operation of GSI at the 
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considered operation stage. In the formalized form these events can be 
written as follows: 



Xlk = (uik < kk) , (h.6) 

where uik is the conditional (only within the considered operation stage 
operating) mean time between failures of the element k or mean time 
between errors of the operator; zik is the required mean time between 
failures of element k within the considered operation stage for its com- 
pletion. 

For determination of probabilities of the events xik it is necessary to 
find distribution functions of random variables uik and zik described with 
the help of physical-statistical, statistical, and expert models (depending 
on the structure and quality of the data). 

The application of the logic and probabilistic methods for descrip- 
tion of accident appearance scenario essentially simplifies estimation and 
analysis of risk of safe GSI operation. The scheme of such analysis with 
applying to one accident is described in details in [2,7]. The meaning 
and features of the risk analysis of safe operation with applying to GSI 
and taking into account the selected parameter can be described as fol- 
lows. First, a list of possible incidents of GSI is prepared. Further, the 
structural models of their appearance are designed, and the structural 
weights of each of the incident causes are determined [2,7]. This allows 
us to form the ranged lists of causes for each accident. The latter reflect 
show the parameters suitable for safety management. Besides the LP- 
method allows us to determine the minimum cross-sections of the safe 
operation (or paths, which guarantee safety). 

The possible accidents causes are divided into four groups: failures 
of GSI equipment elements, unrepaired errors of operators, non-success 
at localization of dangerous situations and initiating events. For each 
cause group, the standard models and recommendations on their ap- 
plication are proposed within the considered problem. For failures of 
equipment elements of GSI and non-success at localization of dangerous 
situations depending on structure and quality of initial data one can 
use the physical- -statistical, statistical and expert models. Thus, for 
physical- -statistical models the given data are the results of measuring 
main parameters, for the statistical models the data are the operation 
time until failure or the time of censoring elements, for expert models 
the data are the expert interval estimations of corresponding parame- 
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ters. For modelling of unrepaired eliminated errors of operators it is 
proposed to use the known experimental models [2,9]. The initiating 
events of incidents are proposed to model with the help of the function 
with values 0 or 1, that is the probability of appearance of initiating 
events can be equal to 0, or to 1, depending on the capability to manage 
them, 

5.3.2 System of monitoring 

The basic tool for maintenance of the demanded safe GSI operation is the 
monitoring of parameters determining safe operation of systems during 
regular operation. Monitoring is understood as the process of regular 
obtaining and primary processing of information about parameters of 
technical condition of the system, which change influences safe operation 
of the system. 

For achievement of the purpose of monitoring within its realization 
it is necessary to solve step by step the following problems: 

1. To carry out the operation safety analysis of GSI means with the 
purpose of definition of parameters that require control; 

2. To determine needed structure and volume of information about the 
checked parameters of elements; 

3. To develop methods of control for the observed parameters and pa- 
rameter monitoring strategy which include formation of the optimum 
schedule of estimation and analysis of safety by given criteria; 

4. To conduct collecting of statistical and expert information on param- 
eters determining safe operation of GSI systems and their checking 
by methods of nondestructive control; 

5. To estimate and analyze the current safe GSI operation on the base 
of obtained information. To forecast safe operation parameter values 
in the planed, pan of time with taking into account results of check- 
ing statistical and expert information on parameters determining safe 
operation of technical systems; 

6. To elaborate actions on maintenance of demanded safe operation of 
the considered system; 

7. To update models of incident appearances in systems and the list of 
checked parameters and requirements of safe operation. 
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The system of parameters permitting to estimate safety of operation 
of technical systems is introduced. The two-level system of parameters 
is proposed for quantitative estimation and analysis of safe operation 
of technical systems. Vector of probabilities of accident appearances 
Q{l) ^ {Qij Q2, 5 • • • , Ql} is introduced. Here the sub index designates 
the type of accident. The components of the vector Qi, Q2, • • • , Ql are 
parameters of the first level. Appearance probabilities of incident causes 
(which, generally, can be element failures of a technical system, person- 
nel errors, non-successes at localization of dangerous situation and initi- 
ating events) are denoted by {ql . . . , gj}, [ql . . . , q ^}, . . . , [qf, ...,<?[} 
and these are parameters of the second level. The probability values 
Ql, Q25 • • • 5 Ql of incident appearances at technical system operations 
will be determined by parameter values of this level. We shall now 
consider in details problems, solved at monitoring. 

The first problem is the analysis of safe operation of technical systems 
with the purpose of determination of parameters that require checking. 
In solving this problem we investigate the operation process and the 
structure of technical systems with the help of the morphological analysis 
method and determine the full list of possible accidents at operation. 

Then the models of incident appearances are constructed on the base 
of models of operating processes of technical systems. The basic of these 
models are scenarios of incident appearances, described formally by log- 
ical and probabilistic functions of incident appearances. It is obvious, 
that the probabilistic function of accident appearances can be expressed 
in terms of probabilities of the incidents causes, which are components 
of the vector Qs = {{gj , • • • , <?p}, , • • • , , {gf , . ■ ■ , gl'}}. After 

that, ranking of causes with regard to the risk factor is carried out, and 
the structural weights of the causes are determined. We assume that all 
causes have the same probabilities. Then we find out the structural sig- 
nificance of accident causes possible at GSI operation. This is necessary 
to determinate influence of the causes to the safety of operation of the 
technical system. 

The second problem of monitoring is determination of necessary 
amount of information on checked parameters, sufficient for their esti- 
mation, and development of instrumental base, necessary for obtaining 
these information. For this purpose it is necessary to define the pos- 
sibility to measure value of the checked parameter or to define a list 
of indirect diagnostic characteristics permitting to determine its value. 
We use it for determining the structure of instrumental base needed for 
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obtaining the demanded information. 

The subsequent problem of monitoring of parameters, which deter- 
mine safety, is the development of methods of checking the observed 
parameters. The problem solution requires implementation of the fol- 
lowing steps: 

• Grouping elements by the type of checked parameters; 

• Definition of sets of checking methods permitting to control corre- 
sponding groups of elements; 

• Development of methods for checking of corresponding parameters 
for each group of controlled elements. 

At realization of the first step it is expedient to divide all set of 
controlled elements of technical systems into groups with controlled pa- 
rameters of the same type. For each of the element groups it is possible 
to compose a list of methods of control and a list of devices for realiza- 
tion of these methods. Selection of a control method should be based on 
knowledge about conditions of element’s operation, its geometrical sizes, 
physical characteristics of element’s material, suitability of elements for 
control, sensitivity of existing methods of control. Definition of param- 
eter monitoring strategy consists in formation of optimum schedule of 
estimation and analysis of safety of operation of technical systems by 
the given criterion. 

The quality of solution to the problem of collecting of statistical and 
expert information and control by methods of non-destructing testing of 
parameters, determine the quality of input data needed for estimation 
and analysis of safety. 

The problem of risk estimation and analysis of current safety of op- 
eration of technical systems based on monitoring results supposes step- 
by-step fulfillment of stages of same algorithm. 

The following problem of monitoring is the development of plan of 
actions on maintenance of demanded safety of operation of the technical 
system on the base of results of estimation. Besides, in solving this prob- 
lem we can correct models of accident appearances, the list of controlled 
parameters, and requirements to safe operation of GSI. At this we up- 
date both the initiating data for models of accidents appearances at the 
GSI operation and the models structure. The necessity of correction of 
the list of controlled parameters, determining safe operation of technical 
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systems, is necessary in view of the changes of accident weights during 
monitoring. The correction of requirements to safety is made at each 
stage of monitoring. 

The considered approach to the risk estimation and analysis of safe 
operation of elements of the ground-based space infrastructure enables 
to estimate quantitatively the risk of safe operation with taking into 
account results of monitoring of technical condition parameters of ob- 
jects, to determine parameters, which are the most effective for the risk 
management, and to substantiate methods of safety management (in the 
framework of the concept of “acceptable risk”). 

The experience of usage of such system of monitoring for the space- 
rocket systems “Proton” proves the high effectiveness as the information 
technology for solving problems of estimation and forecasting of techni- 
cal condition and residual technical resources. 




Chapter 6 



RISK MANAGEMENT 
ON DANGEROUS PLANT 



This material is stated by N. K. Pechenin’s works [14,109-111]. The 
choice of passive or active risk management for each component of dan- 
gerous plant depends on possible damage. The passive risk management 
is performed on the insurance basis, whence the active one is done on 
the basis of regulation of restoration procedures of material resources 
and components of personnel reliability, 

6.1 Difficult problems 

In the theory and practice of risk estimation there are some difficult 
problems. The problem of “the human factor” is most perceptible. The 
detailed analysis of reasons of failures and accidents in complex systems 
shows that often the technological and organizational documentation 
direct to measures for preventive the failures, but they are not realized 
by personnel (fig. 6.1). Most reasons of failures can be removed by 
paying more attention to personnel or by training by personnel. 

Attempts to approach to the human reliability problem with the 
same criteria as to the engineering reliability problem reveal their in- 
consistency. The human failure probability can be determined precisely 
only for the specific person, social conditions and short time period. 
Generalization of obtained data to different peoples, social conditions 
and large time periods results in the growth of the result uncertainty. 

Among other problems attention should be paid to principles un- 
derlying the bases of existing ways of failure probability estimation. In 
many respects they determine te lay efficiency of risk management: the 
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Figure 6.1. Systematization of causes of failures of nuclear reactors 



syncretic reason of failure and extrapolation of probability density func- 
tion outside area limits of values obtained in experiment. 

The syncretic reason principle means characterizing the object 
by a uniform parameter of failure probability, when all or a part of failure 
reasons are not investigated, that is, the influence of the following factors 
on failure probability is not considered: by wearing of each material 
object resource separately; by each reason external to the object; by 
each action of a man influencing object reliability. 

The principle extrapolation consists in transferring a selected 
function describing failure probability density, outside the limits of val- 
ues, obtained in experiment. This principle allows us to fix finite, distinct 
from zero, values of failure probability density at all points belonging to 
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the range, for which there are not experimental data. The extrapolation 
principle is applied both in relation to the object, and in relation to 
each of its material resources. The last plays the special role in practice 
of definition of object failure probability, because the operation time of 
the material resource is usually out of the range of values obtained in 
experiment. That is, for probability estimation of the failure, occurring 
as a result of wearing of the material resource during operation, one 
uses values obtained by extrapolation of experimental data instead of 
the data itself. 

Actually, the failure probability is set as a result of interpretation of 
experimental data by rather free by chosen function of failure probabil- 
ity density in the field of experimental data and extrapolation of this 
function in the area of failures, not containing experimental data. 

The hypothesis on existence of distinct from zero values of failure 
probability density at any operating time is not based on anything. 
The correctly described real situation with wearing of material resource 
demonstrates the legitimacy of other hypothesis: before wearing of ma- 
terial resource results in the object failure, there is a period of time 
when the resource wears out, but the part of resource, which is not 
worn, completely provides non-failure operation of the object. 



6.2 Management of risk 

6.2.1 Period of safe wearing of resource 

If of the operation beginning the material resource has a volume, exceed- 
ing the one necessary for the object work, then the process of resource 
wearing passes two stages: at the first stage, the remainder, not worn 
out resource part completely provides the object trouble-free operation, 
and the failure probability, caused by wearing of the given material re- 
source, is indistinguishable from zero; at the second stage, the material 
resource is worn out to the extent such that the object failure probabil- 
ity due to wearing the given resource takes finite non-zero values. The 
moment of transition from the first stage to the second one, is named 
the threshold time. 

The material resource can be presented as a set of resources, each of 
which wears out in due course. For each resource there is some function 
Rs(t, xi, . . . , Xm), representing dependence on time (t) and conditions of 
operation (xi , . . . , Xm}- In the range to -I- ti the function is not defined 
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(figs. 3.7 and 3.8). Actually, the failure frequency, as the result of 
wearing of the given resource, is equal to zero in the range to ^ • A 

single fact of failure due to wearing an unexplored internal resource Rs * 
(t, a:i, . . . , Xm) makes necessary researches and the subsequent change of 
conditions of operation in such a way that the repeated occurrence of 
the given event becomes impossible in the range to -h ti. 

Since on the left of the point (t) the failure probability is equal to 
an infinitesimal value, and on the right of it the probability has finite 
values, it is reasonable to suppose that in the vicinity of the point (t) 
there is the threshold time. The traditional approach to selection of 
failure probability distribution function does not assume the existence 
of the threshold time. 

Let the moment (t) be threshold time. If the work with the material 
resource is correctly organized, that is, beforehand, before the threshold 
time, the material resource is regularly restored, it may be thought that 
it is possible to check the threshold time. The value of the safety factor 
in defining time between two subsequent procedures of restoration of the 
material resource is determined taking into account investigations on the 
material resource and values of possible damage from the failure, caused 
by wearing the given resource. Hence, the opportunity of the check of 
the threshold time directly depends on the opportunity of realization of 
timely and sufficient researches of the material resource. 

It has already been mentioned briefly in Chapter 1 that Columb’s 
approach to risk management should be applied to processes, such that 
the losses from non-success considerably exceed expenses necessary for 
regulation of the process. It is a troublesome approach, but the expenses 
for its realization grow linearly depending on complexity and danger of 
the process, and the losses from non-success of complex and dangerous 
processes grow in the geometrical progression. At some complexity and 
danger of the process, Columb’s approach economically justifies itself. 

We shall remind the main distinction of two approaches to the risk 
estimation. 

The feature of Bernoulli’s approach consists not in using the Law of 
Large Numbers by Bernoulli and not in using the mathematical prob- 
ability theory on the basis of this law, but in refuse to regulate the 
process, which non-success risk is estimated. 

The feature of the Columb ’s approach consists in detailed regulation 
of those parts of the process, which failure results in catastrophic damage 
of all the process. The consecutive realization of this approach leads to 




Risk management on dangerous plant 111 



decrease of failure occurrence risk on the adjustable part of the process 
to infinitesimal values. 

The effective application of the economical mechanism of insurance 
of dangerous and expensive objects is possible only after transition from 
the risk insurance in the mode of Bernoulli to work in the mixed mode, 
when the catastrophic damage occurrence risk on dangerous parts is 
reduced to infinitesimal values with the help of Columb ’s approach. 

Bernoulli’s (without regulation) estimations of failure probability, 
obtained by interpretation of the experiment data, are put into the ba- 
sis of risk calculation with the help of the probability theory. Both the 
faults of engineering, its non-appropriate usage, infringement of tech- 
nology, and erroneous actions of personnel, all these reasons of failure 
at Bernoulli’s approach loose individuality and are transformed to an 
abstract parameter. 

Columb ’s approach to the risk estimation requires another operating 
with facts. In the basis of Columb ’s interpretation of facts the following 
principle lays: each material resource, each element, each component of 
process should be considered separately so that it could be regulated. 

6.2.2 Risk systematization and classification of problems 

If all the variety of reasons, raising risk of failure or accident of a danger- 
ous object, is located on a straight line (fig. 6.2), placing on the left-hand 
side the hidden defects of technical products, used on the dangerous ob- 
ject, and on the right-hand side the obvious destructive actions by a 
man, than it is possible to represent the applicability area of any risk 
estimation method as follows. The Shaded Area 1 in fig. 6.2 includes 
the purposeful destructive actions. Areas 2 includes failures due to re- 
alized infringements of service regulations, not directed on destruction, 
but causing failures and accidents. The general name of the reasons 
belonging to the Areas 1 and 2 is changed motivation of action. The 
Area 3 includes failures, caused by mistakes of personnel (by random 
actions, not made in the time or ineptly made actions, psychophysical 
or emotional unreadiness of the man to work). The Area 4 includes 
failures, caused by lack of professional knowledge both of workers and 
manufacture organizers. The structure of risks is given in fig. 6.3. 

In the widespread concept “the human factor”, the failure reasons, 
related to human actions loos their individuality. The division of relia- 
bility of the man into three components is necessary for organization of 
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Figure 6.3. Structure of the risk 



effective work to guarantee the safety of dangerous manufactures. It is 
necessary to take into account separately the influence of people directly 
connected with manufacture, and indirectly, through engineering and en- 
gineering specifications. The people, directly influencing the safety, are 
the personnel of dangerous manufacture. The people, indirectly influ- 
encing the safety, are taken into account during reliability estimation 
through parameters of reliability of engineering and authenticity of doc- 
umentation. The personnel of dangerous manufacture have complex 
structure: operative, repair, service, administrative, operational, and 
auxiliary personnel. Functionality of some sorts of the personnel overlay 
some types of personnel complement each other. One thing unites them: 
personnel directly influence safety of manufacture. 

The given systematization of risks requires selection four types of 
problems on the basis of risk estimation and maintenance of reliability 
of object work (fig. 6.4). 

1. Problems of the failure risk estimation of either materials or equip- 
ments or designs (MED) because of their hidden defects. If the failure of 
MED does not result in large damage, then Bernoulli’s approach to risk 
estimation is sufficient. Considerable warehouse stock, systematic deliv- 
ery of spare parts and equipments, and also risk insurance, proportional 
to damage, are capable to ensure normal functioning of any technical 
object. If the failure of the MED leads to the significant damage, which 
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Figure 6.4. Structure of reliability 



appreciably exceeds cost of timely replacement of the misfire function- 
ing material, equipment or design, it is necessary to apply Columb’s 
approach to the risk estimation. In this case for each potential source of 
damage, one should determine the time T, such that after the moment 
failure of the MED becomes very probably. The obtained value of the 
time should be divided by the reliability factor R (fig. 6.6), As 
the result the value of time is obtained, after which the MED should be 
replaced by new ones. If the MED includes materials or elements, which 
failure leads to failure of equipment or design as a whole, it is necessary 
to treat this material or element with same Columh’s criterion. The 
time of replacement is equal to ATrep ~ where R is the safety 

factor of the admitted risk. 

The time, after which the failure of the MED is probable, can be 
considered as the mathematical expectation of failure, providing the 
limits of integration include all area, in which the failure probabilit}^ 
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density distribution function f(x) is defined. If integral is taken not 
over the whole area, then the obtained value of the average operating 
time till failure can not be applied in computation as the time, after 
which the failure of MED is most probable, because usage of the value 
leads to incomplete development of the given resource, the reserve of 
serviceability of elements or components, i. e. reduces the production 
efficiency. The time of the most probable failure can also be determined 
as the median or 50 per cent quantile or as the mean time the operating 
time till failure, (50% of lifelength till failure). 

2. Problems of estimation of risk that the expert does not have knowl- 
edge necessary at the given moment. In all cases, when the failure of the 
equipment, caused by lack of knowledge of the worker, does not result 
in large damage, it is sufficient to apply Bernoulli’s approach to the 
risk estimation. Thus, it is enough to create the professional emergency 
and repair services, and also to carry out the insurance of damage due 
to lack of knowledge of the experts. The given actions are capable to 
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ensure normal functioning of the object. If the failure of the equip- 
ment, caused by the lack of knowledge of the expert, leads to significant 
damage, which appreciably exceeds cost of professional training and re- 
training of the expert, it is necessary to apply Columb’s approach to the 
risk estimation. In this case for each expert it should be determined the 
time, after which the absence of necessary knowledge of the expert is 
most probable. The value of this time is determined by ; 

• Intensity of renewal of information and realization of innovations 
in this area; 

• Quality of knowledge, got by the expert in the educational insti- 
tution (this includes category of the educational institution and 
expert’s grades); 

• Individuality of the man on forgetting of special information. 

The obtained time is divided by the reliability factor: ATtrain — 

/R. After expiration of this time it is necessary to retrain the expert. 

3. Problems of the mistakes risk estimation. If the failure of the 
equipment, caused by a mistake of the personnel, does not result in 
large damage, it is sufficient to apply Bernoulli’s approach to the risk 
estimation. One should insure the risk of damage by making the mis- 
take. This measure is capable to guarantee normal functioning of the 
object. If the failure of the equipment, caused by the mistake of the per- 
sonnel, leads to the significant damage, which appreciably exceeds cost 
on duly psychophysical and emotional preparation of the personnel, it 
is necessary to use Columb’s approach to the risk estimation. For each 
man from the operative, repair and administrative personnel it should 
be determined the time, after which making mistake is most probable. 
The value of the time of making first mistake is determined by: 

• Intensity and monotony of working actions, intensity of attention, lev- 
els of illumination, noise and noise information, convenience of control 
panels, volume and distinguishability of the working information and 
other ergonomic characteristics of the workplace and the process; 

• Individual psychophysical features of the man; 

• Intensity of application of special psychophysical technologies for in- 
crease of emotional stability and readiness of the man to work in all 
possible (design and emergency) regimes. 
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The obtained time is divided by the reliability factor. After expi- 
ration of this time ATrest ^ T^'^/R it is necessary to make restoration 
of missed abilities of the worker. The restoration time should be deter- 
mined both for the man as a whole, and for his/her separate functions 
and qualities. The appropriate procedures, allowing to restore some 
temporarily missed qualities (for example, attentiveness), can be ap- 
plied more often, than other. 

4 . Problems of the risk estimation of conscious non-fulfillment of the 
required actions. If the failure of the equipment, caused by conscious 
non-fulfillment of required actions, does not result in large damage, it 
is sufficient to apply Bernoulli’s approach to the risk estimation. One 
should insure the risk of damage due to conscious non-fulfillment of the 
required actions. 

This measure can be effective, and capable to ensure normal func- 
tioning of the object. If the failure of the equipment, caused by conscious 
non-fulfillment of required actions, leads to the significant damage which 
appreciably exceeds cost of duly formation of motivational readiness of 
the personnel to make their work, it is necessary to use Columb’s ap- 
proach to the risk estimation. It is necessary to determine the time, 
after which the conscious non-fulfillment of the required actions is most 
probable. The value of the time of the most probable conscious non- 
fulfillment of the required actions is determined by: 

• State of structure of the public relations in the world and the country; 

• Readiness of the structure of the public relations, generated in the 
labor collective, to withstand the expansion of moral norms from the 
overactive active social institutes; 

• Internal coordination of the industrial structure of the enterprize; 

• Features of connections of small groups (working groups, brigades, 
shifts) with the structure of the public relations of collective. 

The obtained time is divided by the reliability factor. After expira- 
tion of this time ATgodal — T^'^/R it is necessary to apply the social 
technologies, forming motivational readiness to the safe qualitative work. 

The special block of problems. It is not enough to have four 
problem blocks for transition from Bernoulli’s risk estimation to main- 
tenance of reliability by Columb’s approach. It is necessary to have a 
problem block for definition of the reliability parameter R: 
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• Investigation of data on failures and accidents for parameter estima- 
tion of reliability R, which characterizes the system and the personnel 
at the moment, preceding the accident; 

• Development and statement of the normalized values of the reliabil- 
ity parameter Rnorm, admitted for dangerous objects (the parameter 
should depend on plant types, on product damage and on sources of 
danger). 

The failure occurrence risk calculus on the dangerous plants includes 
the following works: 

1. Definition of the object list, for which Bernoulli’s approach to 
the risk estimation of damage is sufficient. For these objects one should 
apply the technique of the probabilistic analysis of safety (PAS) or the 
LP-modelling for risk estimation and analysis, or to use the practical 
results — the primarily overestimated resources are specified by real de- 
velopment of events. This provides the reliable work of the objects. The 
problem of the manufacture organizers is to ensure duly supply, fulfill- 
ment of the restoration and repair work. For definition of periodicity of 
repairs, volume and periodicity of deliveries, volume of the emergency 
stock, the number of the operational, repair and emergency personnel 
one should apply concepts and ways of definition of values, developed 
in the reliability theory. In Bernoulli’s approach both hidden defects of 
equipments and influence of the personnel are depersonalized. 

The insurance of Bernoulli’s objects is traditional procedure of def- 
inition of the insurance tariff, taking into account the practice of insur- 
ance or results of calculation by techniques of PAS or by LF-models. 

2. The list of objects, plants or their parts is defined, which need 
application of Columh’s approach, that is, the application of all kinds of 
regulation allowing to avoid failures. The following problems should be 
solved: 

1) Definition of the normalized value of the parameter of reliability 
Rnorm • 

2) Preparation of specifications: 

• Regulation works for designs and equipment, their elements and ma- 
terials, which failure does not result in significant damage; for main- 
tenance of their normal operation is sufficient to apply Bernoulli’s 
approach to the risk estimation. 
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• Constructions and equipment, their elements and materials, such that 
their failure lead to significant damage; 

• Regulation works, which, if they are not done, result in failures. 

3) Definition for each construction, equipment, element and material the 
time after which failures is most possible. 

4) Calculation of the time Tchange(repair) — /Rnorm: after which ma- 
terials, equipment, designs or elements should be replaced by new or 
repaired. After repair the probable time till failure should be recal- 
culated. 

5) Definition of the following parameters of professional readiness of the 
experts to the technology requirements: 

• Intensity of updating of the information in those fields of knowledge, 
in which experts work; 

• Qualities of knowledge, obtained by each expert in educational insti- 
tutions; 

• Individual features of each expert on forgetting information. 

On the basis of the obtained parameters for each expert it is possible 
to determine time, after which the absence of necessary knowledge is 
most possible. The obtained values of time should be divided by factor 
of reliability R. In result, for each expert the value of time will be 
obtained, after which the expert should pass retraining. 

6) Definition of parameters of the personnel is predisposition to make 
mistakes: 

• Parameters of ergonomic features of each workplace (intensity of ac- 
tions, monotony, pressure of attention, illumination of the workplaces, 
noise level, convenience of the control panel and equipment on them, 
level of the information noise, volume and distinguishability of the ob- 
tained information, and a number of other ergonomic characteristics); 

• Parameters of individual psychophysical features of each person from 
the object service personnel (temperament, ability to mobilization of 
attention and efforts, influence of tiredness to mistakes, susceptibility 
of large volume of the information.) 

7) Definition of time (on the basis of the obtained parameters) for each 
of the personnel, after which making mistakes is most probable. 
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8) The obtained values of time should be divided by the factor of reliabil- 
ity R. Thus, for each expert the time value is obtained, after which the 
person should restore the readiness of organism to reliable performance 
of work. 

9) Definition of parameters of readiness of the labor collective to resist 
formation of extraneous motivation on the workplace because of the 
public relations in the world country and in collective, behavior of small 
groups of workers, brigades, changes and their connection with the public 
relations in collective, 

10) On the basis of the obtained parameters for each group of the labor 
collective and for all labor collectives, the time should be determined, 
after which expiration the formation of extraneous motivation on the 
workplace is most probable. 

11) The obtained values of time should be divided by the factor of re- 
liability R. For each labor collective and group the time value will be 
found, after which it is necessary to carry out measures on restoration 
of motivational readiness for safe productive work. 

Basis of Columb’s approach to the of risk estimation problem is the 
maintenance of total regulation of production. For this purpose complex 
and dangerous production should be considered in parts. The service- 
ability of each part is concerned with development of one or a group of 
material resources, for each of which the function of probability distri- 
bution density of failure is known. The diagram of this function consists 
of two qualitatively distinguishable parts: in the first part the material 
resource wears out, but it is sufficient for maintenance of non-failure op- 
eration of the object. In the second part the material resource is worn 
out so that in some cases it can lack for non-failure operation of the ob- 
ject, and there is a finite value of failure probability due to development 
of this resource. Some material resources can have unusual form. For 
example, the weakening of screwed connections during work is necessary 
to consider as wearing of the material resource, which value depends on 
vibration, character and value of loading, from character and quality of 
the groove surface, from application of greasing and from the effort ap- 
plied at connection. For known values of these parameters the screwed 
connection will be characterized by the diagram of the failure probabil- 
ity distribution density function, on which there are two qualitatively 
distinguishable parts: the time, when the connection works trouble-free 
and the time, when the probability of failure has a finite value. For this 
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function we compute the value of the most probable time of operating 
before failure. Using this time, with the help of the reliability parame- 
ter we should determine the periodicity ATrepT^'^ / Rnorm of necessary 
strengthening of screwed connection. 

The part of production in Columb’s approach is also the personnel. 
This approach considers engineering as a set of the large number of ma- 
terial resources, each of which is necessary to regulate. The personnel, as 
more complex than engineering component of the process, is considered 
in three aspects; 

• As a carrier of knowledge which is necessary for realization of produc- 
tion (cognitive component); 

• As an owner of own body and own mentality, more or less suitable for 
maintenance of process (psychomatic component); 

• As a participant of the public relations, in which the motivation of the 
person to fulfilment of acts (psychosocial component) is formed. 

Retraining of the experts on each of cognitive resources should be 
done with periodicity ATtrain — / Rnorm- For each of psychometrical 

resources it is necessary to use procedures of resource restoration with 
periodicity AT^est = /Rnorm- For each of psychosocial resources it 
is necessary to work with collective and small groups with periodicity 
ATsoc,a = T°'^/Rn orm- 

The diagram of failure probability distribution function, as it indi- 
cated above, at Columb’s approach is characterized by the initial part, 
on which the basic opportunity of object failure cannot completely be 
excluded, but any finite value for such failure probability estimation does 
not defined. 

The experience of operation of any object, say gear-wheel, gives an 
other failure distribution than that obtained in carefully prepared ex- 
periment. In practice the failure of gears in operation is possible always. 
The reasons of earliest failures are connected with deviations from con- 
ditions of technical operation. In Bernoulli’s approach the distinctions 
in the reasons causing failure are ignored, therefore it works well for 
the practical data estimation. For the description of the operating time 
distribution, this approach recommends functions with finite values of 
probability in the range of operating time from 0 to co. Columb’s ap- 
proach requires separation of the reasons of failures. Along with the 
technical reasons, by wearing out of material resources (for example, 
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fatigue deformation of metal in the berth of gear cogs), other reason 
groups should be recognized, related to insufficiency of expert knowl- 
edge, to mistakes of the personnel and to the changed motivation of 
actions. Such division allows us to apply functions with infinitesimal 
values of probability in the first part of the diagram for risk estimation. 

An uncertainty is brought into the logic of Columbus approach by 
the problem of accuracy of definition of the operating time before fail- 
ure for each of material resources of engineering. The uncertainty is also 
by problems with definition of functions of the operating time before 
failure on each field of expert knowledge, on each of reasons causing 
mistakes of the personnel, on each inconsistency between activities of 
social institutes. In order to neutralize this uncertainty, in relation to 
engineering, the methods of non-destructive control are applied. The 
quality of control methods is a basis for definition of the normalized 
values of reliability Rnorm for dangerous objects in engineering. The 
insufficiency of the control forces to overestimate the parameter of re- 
liability. In order that the normalized reliability parameter could be 
determined only by the object characteristics (level of danger, complex- 
ity and etc.), each of the control methods should be given with a rank. 
The set of the rank parameters is used to define the periodicity of repairs 
and service. 



The legitimacy of application of one or another functions for the de- 
scription of the operating time before failure due to insufficiently expert 
knowledge is also related to the method features for control of experts 
knowledge and skill to use the knowledge. 

Similar situation is with techniques of psychophysical readiness of 
the personnel for performance of work and psychosocial readiness of 
labor collectives. In all cases determination of a system of coefficients 
describing methods of the control is necessary. We have 



^Trepair — '^enginl {^qual 



Rnorm ' ^Rrain — ^knowl/ i^l^nowl ' R 
^T^reconst — '^psycho/ i^psycho ' Rnorm) y 
^Racial — ^social/ {.^social ' Rnorm.)} 






( 6 . 1 ) 



where Kguah Rknowh R psycho, R social are factors of method quality of the 
non-destructive control, knowledge control, psychophysical control, psy- 
chosocial control, respectively. 
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6.2.3 The use of risk computation results 
in exploitation 

1. With the help of Bernoulli’s approach we usually determine the 
necessary periodicity and volume of equipment and materials for re- 
placement of those leaving out operation because of failures. Thus, as a 
basis for computations we accept the failure probability of equipment, 
constructions, their elements and materials, probability of violation of 
the requirements of operational instructions, making mistakes and per- 
sonnel knowledge insufficiency. The parameters which are related to the 
reliability of a person, can also be taken into account by implicit ways; 
they are incorporated into the failure probabilities obtained in practice 
for different kinds of engineering in different conditions of operation. 
Bernoulli’s approach allows us to determine for emergency and repair 
services the required level of technical equipment and prospective volume 
of work, and also to determine quantitative and qualitative structure of 
the operational, repair, auxiliary and emergency personnel. 

2. With the help of Columb’s approach it is possible to determine 
the list of technical objects and their parts, labor collectives, workplaces 
and specialists, which do not allow to apply Bernoulli’s approach to 
the risk estimation. Further, for each of the spent material resources or 
elements of the equipment, the time should be computed, after which the 
resource or the element needs replacing or repairing. If the repair does 
not involve complete replacement of the resource, then for the resource 
the repair periodicity should be determined (with taking into account, 
that the probable time of failure after repairs is progressively reduced). 

On the basis of the defined work volumes the requirement of experts, 
a number of workplaces, manufacture organization structure is deter- 
mined. For each expert the time is determined, after which professional 
knowledge should be updated. 

For each member of the personnel of the dangerous object the time is 
determined, after which the person should restore psychophysical readi- 
ness for work performance: for different kinds of works and for different 
kinds of the human abilities the periodicity is different. 

For each labor collective and for each small group, the time is deter- 
mined, after which the social technologies, ensuring restoration motiva- 
tional of readiness of the personnel to safe productive work should be 
applied. On basis of the data set the number and professional structure 
of administrative and auxiliary services are defined. 
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6.2.4 Principles of work organization for risk decrease 
Principle 1. Setting in the regulatory documentation: 

• The requirements to work out for each dangerous object the lists of 
the equipment, constructions, elements and materials, for which the 
calculation of periodicity of replacement or repair is necessary on the 
basis of the normative reliability parameter Rnorm] 

• The requirements to work out the lists of professions, workplaces and 
labor collectives, functioning reliability of which should also be sup- 
ported taking into account the parameter of reliability Rnorm] 

• Criteria of classification of dangerous and expensive objects by value 
of the parameter of reliability Rnorm] 

• The requirements to take contracts with research organizations on 
development of restoration methods for each of four components of 
reliability and quality control methods by each of components, and 
also development of methods of the risk estimation; 

• The requirements to appoint supervising organizations conducting sys- 
tematic and random inspection of quality of estimation and main- 
tenance of normalized reliability of dangerous objects, and also the 
quality check of the risk estimation. 

Principle 2. Setting in the normative documentation and in safety 
rules the requirements on periodicity of repairs and replacements of 
the equipment, building constructions, their elements and materials (for 
determination of the periodicity normalized parameter of reliability is 
used), and on periodicity of work on maintenance of reliability of the 
personnel of dangerous objects, which has three directions: 

• To update knowledge (for providing quality of performance of the tech- 
nology requirements); 

• To support serviceability (for providing the faultlessness of work of 
the personnel); 

• To increase motivation to safe productive work (for providing the time- 
liness and accuracy of operation). 

Principle 3. Organization of continual work of research and super- 
vising organizations in each of the following directions: 
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• Research of development of material engineering resources (equipment, 
constructions, their elements and materials), investigation of methods 
for estimation and control of development and restoration of resources, 
licensing of methods and techniques; 

• Research of necessary knowledge structure for the experts of different 
professions, dynamics of knowledge update in various branches and 
research of new methods of replenishment and usage of knowledge, 
methods of estimation and control, licensing of techniques; 

• Research of psychophysical readiness of the workers, research of meth- 
ods of estimation and control, licensing of methods and techniques; 

• Research of the mechanism of formation of motivational readiness of a 
person for performance of work and methods of estimation and control, 
licensing of techniques; 

• Research and development of mathematical methods of risk and dam- 
age estimation; 

• Quality control of estimation and maintenance of normalized reliability 
of dangerous objects, and quality control of estimation of risk to get 
damage. 

For work organization of research and supervising organizations, in 
compliance with the described principles, it is necessary to develop mech- 
anism of financing with the central place of insurance companies. 

Principle J^. Organization of insurance of the damage caused by 
failures of the equipment. The insurance contract should provide that a 
part of funds, accumulated in the insurance pool, is used for financing 
research, organizational and technical work ensuring reliability of the 
dangerous equipment in Columb’s sense. 

Principle 5. Development of the following techniques and tech- 
nologies (methodical base): 

• Risk management; 

• Calculation of reliability of the dangerous object; 

• Classifications of dangerous objects; 

• Maintenance of a necessary level of reliability of engineering; 

• Maintenance of a necessary level of reliability of technology by regu- 
lation of forms and periodicity of retraining of experts; 
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• Maintenance of a necessary level of reliability of operation by regula- 
tion of forms and periodicity of restoration of motivational readiness 
of labor collectives for performance of work; 

• Maintenance of a necessary level of reliability of the personnel by reg- 
ulation of periodicity of restoration of psychometrical readiness of peo- 
ple for performance of work. 

After the risk value for one dangerous manufacture is determined, 
the expenses for maintenance of indefinitely low failure probability of 
the equipment are calculated, and the risk is compared with expenses, 
it is possible to make generalization of the results for manufactures of 
the same type. It will make possible to correct the current expenses. 
The means for liquidation of consequences of failures and failures can be 
accumulated in the insurance companies. Hence, there is no necessity 
to create funds for emergency use at each enterprize. It is enough to 
add to the current expenses the current insurance payments. Thus, the 
value of payments is determined by the risk value. 



6.3 Financing of the risk management process 

The basic features of risk management financing is the following: 

1. Work on reliability maintenance by Columb’s method requires 

increase of financing for: 

• Realization of planned-prophylactic repairs and services; 

• Maintenance of necessary periodicity and volumes of repairs and ser- 
vices; 

• Maintenance of the necessary forms and periodicity of retraining of 
the experts; 

• Maintenance of the necessary forms and periodicity of restoration of 
motivational readiness of labor collectives for performance of work; 

• Maintenance of the necessary forms and periodicity of restoration of 
psychomatic readiness of people for performance of work; 

• Researches on features of manufacture of each of material resources; 

• Researches on the necessary forms and periodicity of retraining of the 
experts; 




126 E. D. Solojentsev 



• Researches on the forms and periodicity of restoration of motivational 
readiness of labor collectives for performance of work; 

• Researches on the forms and periodicity of restoration of psychomatic 
readiness of the people for performance of work; 

• Development of methods of the non-destructive control of engineering; 

• Development of methods of the knowledge control; 

• Development of methods of motivational control; 

• Development of methods of psychomatic control; 

• Researches of volume of controlling actions on directions of work. 

2. The basis of insurance organization of dangerous object is the 
separation of its components, equipment, designs, elements and mate- 
rials into two groups. For the first groups Bernoulli’s approach to risk 
estimation should be applied. For the second group Columb’s approach 
should be applied. The criterion of division is the value of damage, 
which can be covered by insurance organization that is, the normalized 
damage. 

3. The normalized damage should be determined from the condi- 
tion of the minimal insurance tariff with taking into account features of 
expense change: 

• The more that part of dangerous object, which reliability is provided 
by Columb’s method, the less the insurance tariff (the insurance by 
Bernoulli’s principle refers to the equipment not creating large damage 
at failure); 

• The more that part of dangerous object, which reliability is provided 
by Columb’s method, the larger means are necessary to spend for 
maintenance of required periodicity restoration of material resources 
of object and maintenance of reliability of the person. These means 
can be gained received by increase of norm of assignments for repair 
work and increase of the insurance tariff. 

The reduction of the insurance tariff by damage reduction has nonlin- 
ear dependence on the amount of the equipment insured by Bernoulli’s 
method. The function of increase of the insurance tariff by growth of 
expenses for maintenance of reliability by Columb’s method is close to 
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linear one. Therefore, always there is the area of values area of dam- 
age by equipment failure, in which the value of the insurance tariff is 
minimal. One of values of this area can be accepted as normalized. 

4. The reliability maintenance of dangerous objects by Columb’s 
method^ at which the costs of the insurance company on payment of the 
insurance premiums are limited to the value of the normalized damage, 
is possible only, when significant means are spent to researches, develop- 
ment of the methodical, regulatory and normative documentation and 
control. Taking this into account, in practice of organization of dan- 
gerous object insurance it is possible to refuse formation of insurance 
pool, focused on covering of expenses from failure of Chernobol’s type. 
Means of the insurance companies should be used primary for financing 
researches, documentation development and inspection. 

5. The mode “of partial insurance” can be used by the insurance 
company for the dangerous enterprize. The mode assumes the insurance 
premiums are paid only at failures resulting in damage, not exceeding the 
normalized one. In this case the insurance tariff paid by the enterprizes 
to the insurance organization, should be reduced, and the difference 
between the existing high insurance tariffs and the reduced one in the 
mode “of partial insurance” should be directed to financing of researches, 
development of the documentation and inspection realization. 

Let us outline the basic rules for economic calculations: 

1. For organization of work on risk management at an enterprize the 
lists of objects, equipment, constructions, materials, professions, jobs, 
labor collectives should be made, if their failure in work can result in: 
catastrophic damage; certainly large damage; damage compared to ex- 
penses for damage prevention; insignificant damage. 

2. For the personnel and engineering of first three categories (the 
group A, may be, with exception for a part of resources of the category 
C or all resources of the category C and part of resources of the category 
B) the computation of expenses, which are spent for duly restoration of 
material resources and resources of the personnel, should be made. The 
computation is done providing that the period from the resource work 
beginning to the moment of its restoration should be R times less than 
the period from the resource work beginning to the moment, when the 
probability of its failure takes the given finite value. 

3. Group B is formed by the engineering and personnel which were 
not included into the group A. 




128 E. D. Solojentsev 



The system of the equations describing expenses for work organiza- 
tion according to the stated rules looks as follows: 
for all resources i E A, 



Ea — Zi{Rj)\ 
ieA 

jeB 

Zj = mm{Zj{qj)AUjqj]\ 



Rs — m.Ayi{qjUj + qj-kUj-k + Qj;k;lUj-k;l + • • . + Qj;k;l,...,nUj-k',l,...,n}’^ 
for all elements and components j, k, l...n G B, 

(6.2) 



Here: 

• Za are the total expenses on the group A; 

• Zi{Ri) is the are expense for restoration of the resource i which is 
carried out with periodicity, dictated by the reliability parameter Ri 
for the resource i; 

• Zb are the total expenses on the group B] 

• Resulting expenses on j-th element of the group B, including expenses 
for maintenance of failure probability qj and expenses for indemnity 
of damage Uj (from the condition of minimum of Zj at constant Uj 
one determines the value of qj)] 

• Expenses for maintenance of failure probability qj of j-th element of 
the group R, leading to damage in the case of failure; 

• The maximal risk in the case of failure of any element or combination 
of components and elements of group B] 

• Damage caused by failure of any element or any combination of ele- 
ments; 

• Insurance payments of the enterprizes ensuring compensation of dam- 
age, caused by failures of elements of group B (partially or completely), 
and, possibly, spent to partial covering of restoration of resources of 
the group A. 
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The complete expenses of the enterprize, depending on participation 
of the insurance companies in organization of its economic activity, can 
be formed as follows: 



Zcompl = Z A -k z B Rs{l- + (^)\ 

Zcompi — Za + Zb + S{b, Rg) + (1 — b){l + (d)Rs\ 
Zcompi = (1 ~ G‘)Za + Zb + S{Rg, a, Za), 



where: 

P is the factor, increasing the deduction for the risk insurance because 
of necessity to pay of credit rate in the case, when the failures with 
the large damage take place before the enterprize account accumulates 
sufficient sum from the last assignment for risk, and it is necessary to 
take a credit at bank on the damage covering; 

6 is a share of risk from the insured engineering of the group J5; 

a is a share of expenses on work organization according to the con- 
cept of managed risk (on researches, development of methodical base, 
organization of introduction, realization of preparatory works, control), 
which is paid by the insurance company itself, proceeding from the op- 
portunity to insure many enterprizes of the some type. 

In the first case the enterprize does not insure the risk. It leads to the 
higher expenses for works organization with the personnel and engineer- 
ing of the group A and higher deductions for insurance. In the second 
case, the insurance contributions on risk are reduced in that measure, 
in which the insurer covers the damage from failures and accidents of 
the personnel and engineering of the group B. In the third case, the 
enterprize expenses are reduced in that measure, in which the insurer 
takes the charges on organization of works according to the concept of 
managed risk. 



6.4 Reliability regulation of engineering 
and a person 

The attempts of taking into account the personnel influence on work 
of an object of the group A are traditionally restricted by some basic 
circumstances. First, the failure probability of a person is difficult to 
measure. Some success is achieved at taking into account the mistake 
increase on simple operations in dependence on growth of tiredness of 
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the person or on change of conditions of work. In relation to more or less 
complicated activity any authentic data about the human failure prob- 
ability is not present. Secondly, the man work reliability parameters is 
influenced by many factors. Description of the factors is an independent 
difficult problem, because there are no simple rules to define whether 
and how these factors influence small groups of object’s personnel. To 
account the influence of these factors on the failure probability now is 
impossible. 

The concept of managed risk allows us to avoid the necessity to 
estimate human failure probability at any moment of time. All, that 
is required to know about resources of the man, is the mean value of 
probability of failure or the most probably time of failure. Finding this 
information is possible. The concept allows us to make the resource lists, 
which should be given to the personnel for different kinds of activity. 

We can give to the human reliability parameter Rh^'^ different values 
for different level of responsibility of the personnel. This ensures that, 
with a different stock for different levels of responsibility the achievement 
of the critical point of transition from the period with infinitesimal prob- 
ability of exhaustion of the resource to the finite values of probability 
will be prevented. 

The man features allow to unite all the human resources to three 
large groups: 

• Cognitive resources which have the reliability parameter Rhc^'^; 

• Psychomatic resources which have the reliability parameter Rhps^'^; 

• Motivational resources which have the reliability parameter RhimP'^ . 

For each group of resources we apply specific technique of restoration. 
It is necessary to understand that the concept of managed risk is the first 
theory that gives an opportunity to take into account the man influence 
on the reliability degree of dangerous manufactures, it is the first that 
makes it possible to compare expenses for the man resources restoration 
with expenses for restoration of object resources. 

6.5 Consideration of natural and man-caused 
accidents 

The separation of objects, equipment and materials into groups A and B 
does not take into account influence of natural and man caused accidents 
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on the character of development of the material resource (the accidents 
are the external phenomena for engineering, which are considered ac- 
cording to the concept of acceptable risk). The concept of managed risk 
does not exclude application of the concept of acceptable risk (fig. 6.6). 

It is possible to be protected from external failures with the help of 
technical decisions (underground structures, aseismic design and etc). 
These structures should be refer to the group A and the appropriate 
work on restoration of their resources should be performed. The acci- 
dents probability is insignificant, and, depending on the damage value, 
the risk value can be compared with the damage due to failures with 
engineering of the category B. In this case additional measures for de- 
creasing damage is unjustified. The damage can also be reduced with 
the help of special protection of not the whole object, but of the most 
responsible parts of it only. However, the concept of managed risk does 
not consider regulation of damage. The risk insurance related to acci- 
dents, is possible either for a large number of insurance objects or when 
the state guarantees credits of the insurer in the case of accident. 

6.6 Probability of poor organization 

The activity of the developers of methodical base is organized as work 
of the personnel of group A (with maintenance of periodicity of resource 
restoration of the personnel). 

Taking into account the quality of work of designers and developers 
of technology. The features of designers and developers of technology is 
that they are not necessarily the object personnel. Meanwhile full work 
with them as with the personnel of group A should be done. 

Taking into account work quality of the designers of the special en- 
gineering. It is not possible to obtain authentic data about nature of 
wearing of material resources of special engineering. Therefore, in man- 
ufacturing special engineering the work should be organized as with 
objects of the group A. With the personnel, who produce the special 
engineering, the work should be organized for duly restoration of all 
three components of the human reliability. 

Taking into account of opportunity of terrorist act. The work on pre- 
vention of the terrorist act has two large components. It is the protection 
against external threat and the protection against internal threat. The 
prevention of the terrorist act made by the object personnel, is provided 
by dealing with motivational component of the personnel resource. It 
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is a problem of social psychology solved with the help of the analysis of 
activity of social institutes and application of special techniques, which 
correct the connection of the man with structure of the public relations. 

The operative analysis of activity of social institutes makes it possible 
to predict external threat too, in particular, to define the most probable 
social and psychological portrait of the terrorist. For maintenance of 
reliability of physical protection of object, the design, equipment and 
materials, used for organization of the physical protection, should be 
referred to the group A. 




Chapter 7 



BASES OF LOGIC AND 
PROBABILISTIC CALCULUS 



For logical and probabilistic evaluation of risk in complex systems, it is 
necessary to introduce the algebra of logic. The algebra, including the 
propositional calculus or the Boolean algebra, is a part of the mathe- 
matical logic [2,59]. 

7.1 Some information from Boolean algebra 

Proposition in mathematical logic is understood as any statement such 
that there is sense in saying that it is true or false, so that the proposition 
may be either true or false. Propositions are commonly denoted by the 
capital letters A, B, C, etc. 

A variable which takes only two values (1 or 0) is called binary vari- 
able and preassigned binary variables are named the arguments. There 
are propositions whose values are determined by the values of other 
propositions, i.e,, they are their functions. The function which takes 
only two values (1 or 0) and determined by various set-ups of binary 
arguments are referred to as binary function or function of the algebra 
of logic (FAL) . 

Mathematical logic studies the problems of presentation and trans- 
formation of binary functions of binary arguments by means of certain 
logical operations known as logical connections. Logical connections can 
be used to make from simple propositions compound ones taking the val- 
ues “true” (1) or “false” (0) depending on the values of the incorporated 
simple propositions. Logical connections between propositions can be 
presented as operations with respect to binary variables. Let us now 
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Table 7.1. Logic table 



X 


y 


X Ay 


xV y 


X 


X ^ y 


x-^y 


0 


0 


0 


0 


1 


1 
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0 


1 


1 


0 


1 


1 


0 


0 


1 


0 


0 


0 


I 


1 


1 


1 


0 


1 


1 



or basic operations 



determine the basic logical operations. 

Logic operations, such as conjunction (logic multiplication), disjunc- 
tion (logic addition), negation, equivalence, implication, are usually de- 
noted by the marks A, V, — , respectively and are represented by 

means of the truth Table 7.1. 

It is the so-called tabular way of defining FAL. Along with the latter 
way, one can represent the functions with the help of the formulas in lan- 
guage containing variables x, 2 (possibly, with indexes) and symbols 
of some definite functions. 

With the help of the equations of the algebra of logic it is possible 
to describe conditions of efficiency or danger of systems. The equations 
show, which elements (initiating conditions) and connections should be 
taken to guarantee performance of given system, (or getting to a dan- 
gerous condition). 

Let us consider now basic logical operations in more detail. 



7.2 Basic logical operations 

Conjunction. Conjunction or logical multiplication of propositions A 
and B is denoted by A A B (read; A and B). Sometimes, logical multi- 
plication is denoted by symbols “a:”, or no sign at all is placed 

between the letters of the positions being multiplied : 



A A B = A • B = A&B = AB. 



The value of truth of logic product A&B is determined depending on 
values of the truth of propositions A and B according to the following 
formulas: 



0A0 = 0; OAl-0; lA0-=0; lAl = l. 

Conjunction A&B of two propositions is a compound proposition which 
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is true if and only if its components A and B, are true. 

Disjunction. Disjunction or logical addition of two propositions A 
and B is denoted by the formula A\/ B (to read: A or B). The value 
of the logical sum A\/ B depending on the values of the components of 
propositions Ay B can be found from the following formulas: 

0V0 = 0; 0V1 = 1; 1V0 = 1; 1V1 = 1. 



In the subsequent presentation we shall also use (with the purpose 
of simplification of formulas) the matrix representation: 



Ay 



A 

B 



Disjunction of two propositions A and is a compound proposition 
which is false if and only if both addends A and B are false. 

Negation. The negation of proposition A is denoted by A' (often A) 
(to read: not A ). The value of the proposition A can be found from the 
following expressions: 



I' = 0; O' = 1. 

Thus, the negation of proposition A is false when A is true, and true 
when A is false. 

The above logical operations are not independent and can be ex- 
pressed through each other. Logic expressions are transformed according 
to definite rules which will be considered below. 

Rules for One Variable 



1 . AA1 = A] 

2. Aa0 = 0; 

3. = 

4. A A A' = 0; 

5. ^Vl = l; 



6 . AyO^A; 

7. AyA = A; 

8. AyA' = l; 

9. A" = yl; 

10. A"^ = A'. 



Rules 1-10 can easily be proved by replacing A by unity and zero. 
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As a corollary, from rules 3 and 7 we have 

AaAA---AA = A; 

Unlike numeric algebra, the “multiplication of the variable by it- 
self” or “cancelling of the similar terms” is carried out in the algebra of 
logic in conformity with the reduced identities without any exponents 
or coefficients. 



Rules for Two or Three Variables 

The conjunction and disjunction operations possess a number of 
properties analogous to the properties of ordinary operations of mul- 
tiplication and addition. It is easy to see that the associative law holds 
for these functions: 

11. Aa{B AC)^{AaB)AC ^ AaB AC] 

12. AW {B V C) = {Aw B) V C = AV B y C, 

along with the commutative law: 

13. AaB = BaA] 

14. AW B ^ BW A. 

The rules 11-14 express the properties of conjunctions and disjunc- 
tions separately. 

Since the associative and commutative laws are valid for logical mul- 
tiplication and logical addition, the expression incorporating conjunc- 
tions and disjunctions may be written without brackets. In this case it 
is agreed to consider the connection with the sign A to have higher pri- 
ority than one with the sign V. This allows us to write the expression in 
the algebra of logic in the same way as in ordinary algebra (in the calcu- 
lations the “primary” operations are performed before the “secondary” 
ones). This agreement allows us to write simply A A B V C instead of 
(A A B)V C. 

Let us now consider the rules describing the connection between 
the operations of logic multiplication and addition taken together. It 
can be proved that the distributive law of conjunction with respect to 
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disjunction holds for these functions: 

15. Aa{BvC)^{AaB)V{AaC), (7.1) 

along with the distributive law of disjunction with respect to conjunc- 
tion; 



16. AV {B AC) ^ {AV B) A{AV C. 

The latter law is not applied in ordinary algebra. Indeed, 

a A be ^ {a A b) • {a c). 

It should be pointed out that all the three laws have a “symmetry” 
in the sense that a corresponding law for conjunction (disjunction) can 
be obtained from any law for disjunction (conjunction) by replacing the 
signs of disjunction by the signs of conjunction and vice versa. Indeed, 
if we take , for example, expression for (7.1) 

AA{B\/ C) ^ {AaB)A {AA C). 

and change the signs we shall get 

A\/{BaC) = [AvB)A(AyC). 

The following law is known in the literature under the name of duality 
or inversion law, it makes possible to replace negation of conjunction 
by disjunction of negations and negation of disjunction by conjunction 
of negations: 

17. {AABy = A'wB'n 

18. {Ay By = A' ABf } 

If the rule 9 is applied to the expressions (7.2) we shall have parcel 
parcel 



19. (AA-B) = {A'wBy'; 1 

20. {AyB)^ (A' A B'y. J 



The latter two rules (7.3) are called de Morgan’s formulas in the 
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honor of one of the founders of mathematical logic; the rules allow logical 
multiplication to be expressed through the negation of the logical sum 
of inverse propositions, and the logical sum through the negation of the 
logical product of inverse propositions. Formulas (7.3) can easily be 
generalized for any arbitrary number of logical variables, namely; 




where the logical variables are denoted by one letter x with the index 
i{i = 1, 2, . . . , n) and the signs of conjunctions and disjunctions are used 
similarly to the signs of the product Yl £^nd the sum employed in 
ordinary algebra. 

The above-given basic laws can be used to establish a number of 
other useful relations which make it possible to simplify composite logical 
expressions. 

Let us first introduce operations of absorption and joining. The 
operation of absorption is determined by the relations 



21. {AAB)\/A = A; 

22. AA{BWA)-^A. 



The operation of joining is determined by the relations 

23. (AaB)\/{Aa B') = ABy AB' = A{B y B’)^ A >\=A\ 

24. {AAB)y {A' AB)=ABy A'B = B{A yA') = B'l^B. 



where the operation of logical multiplication is written without the sign 
of conjunction. 

Let us now simplify the expression A A {A' V B). On the basis of the 
distributive law of conjunction with respect to disjunction (7.1) we have 

AA{A^y B)^{AA A!) V (yl A B). 

In conformity with rule 4: A A A' — ^ and therefore 

AA{A!yB)=^y{AAB). 
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Utilizing rule 6 we finally obtain 

25. AA{A^VB)^AAB. 

On the basis of the distributive law of disjunction, using rule 16, we have 
AV (A' AB) ^ (AV A') A {Ay B). 

By the rule 8 A V A' = 1 we have 

Ay {A' AB)^lA{Ay B). 

It can also be shown that 

26. AA{A' AB)=AaB. 

The operation of the generalized joining is determined by the relations 
27. AB V B'C = ACyABy B'C; 



A 


B' 


— 


A 


A 


B' 


(7,4) 


B 


C 




C 


B 


C 


J 



The proof for the first formula of (7.4) is carried out by logic multipli- 
cation of the first term by 1 V C and of the second term by 1 V A, and 
subsequent application of rules 15 and 23. The proof for the second 
formula of (7.4) is carried out by addition to the first cofactor the term 
0 A A and to the second cofactor the term 0 A C , and by application of 
rules 16 and 24. 

Let us illustrate this proof for rule 27 in the matrix form: 



AB 


— 


B'C 







AB 


= 


AB 


z= 


AB 


= 


AB 




ABC 




B'C 




B'C 




B'C 




B'C 




ABC 




AC\B 




AC 




B'CA 




B’CA 




\B' 







AB{iyC) 
B'C{1 V A) 
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7.3 Basic definitions and accepted notations 

Let us introduce the “exponent” of argument x which will be denoted 
by where ai is the binary variable. We shall assume that 

ai '^/ I5 

^ ~ if ai = 0. 

Definition 1. Expression of the type 

K = xf^^x^E..x^- (7.5) 

we shall name elementary conjunction (K) of rank r. Since xix[ = 
0 and XiXi . . .Xi — Xi, then all letters are different in the elementary 
conjunction. 

There are exactly 2^ of different binary set {a\,a 2 ^ . . . and, hence, 
2^ of different type conjunctions shown in (7.5). 

Definition 2. Expression of the type 

KiW . . .V KjW . . .V Ks, 

where Kj are elementary conjunctions of various ranks, we shall name 
the disjunctive normal form (DNF). For example, the function 



f{xi, . . . xfi) = X\X2 V X\X2x'2^ V x'iX 2 ,X 4 ^ 



is written down in DNF, as it has three terms being elementary con- 
junctions. 

Definition 3. If the function f{xi,X 2 ^---,Xn) is written down in 
DNF, and the rank of each elementary conjunction is equal to n, then 
such DNF is named the perfect disjunctive normal form (PDNF ), and 
conjunctions are members of PDNF. 

Definition j. Expression of the type 

V V . . . V x^^ 

is named the elementary disjunction (D) of the rank r. 

Definition 5. We shall say that two elementary conjunctions are 
orthogonal ones, if their product is equal to zero. For example, the 
product of elementary conjunctions xix '2 and x\X 2 X 2 ,X 4 ^ is equal to zero. 
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as one of them contains x' 2 , and another of them contains X 2 and, hence, 
they are orthogonal. 

Definition 6. A DNF is called orthogonal disjunctive normal form 
(ODNF), if all its members are orthogonal in pairs. According to this 
definition PDNF is ODNF, as all its members are orthogonal in pairs. 
But PDNF is the most uneconomical of all forms of ODNF, as it contains 
the maximum quantity of the letters. 

Definition 7. Iteration- free DNF is such DNF, in which all letters 
have different indexes. The letters Xi and xl have the same index, there- 
fore they can not simultaneously enter in IFDNF. 

Definition 8. Iteration-free form of FAL is the form, in which all 
letters have different indexes. The special case of the iteration-free form 
of FAL is IFDNF. For example, the function 









V 


2^5 


Xq 


f(xi , . .. ,a;8) = 




2^3 






Xjx'g 






2^4 









is written down in the iteration-free form, as all letters have different 
indexes. 

Definition 9. The probabilistic function (PF) is the probability that 
FAL is true 



P{f{xi,. . . ,Xn) = 1}. 

Definition 10. Functions of the algebra of logic, admitting direct 
transition to the PF by replacement of logic variables by probabili- 
ties and logic operations by the appropriate arithmetic operations, are 
named the forms of transition to replacement (FTR). 

Definition 11. The probability function mixed form (MFFP) is the 
form of the function, obtained as the result of partial replacement in FAL 
of the logic variables by the probabilities and containing simultaneously 
two types of variables (logic variables and probabilities) and two systems 
of operations (logic and arithmetic ones). 

The feature of MFFP is as follows: all the relations to arguments 
are determined in the explicit form through used elementary operations 
(logic and arithmetic ones). It cannot contain the operators of the type 
P{f = 1}, if the explicit expression of such functions as PF or MDNF 
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is not known. The mixed form has a simple probabilistic sense. If the 
function after the replacement of some logic variables has yet no replaced 
variables of the vector X, then P{f = 1} = P{X). This expression has 
a sense of the conditional probability that f — I . Moreover, the condi- 
tions are written down with the help of not replaced logic variables. On 
assigning value of the vector X the probability P{X) turns into the con- 
ditional probability, written down in the form usual for the probability 
theory. 

Definition 12. The form of FAL, admitting the transition from 
MFFP by replacement of a part of logic variables by the appropriate 
probabilities and the logic operations by arithmetic ones, and by mov- 
ing not replaced logic variables to parameters of a degree of probabili- 
ties, is named the form of transition to the partial replacement (FTPR). 
FTPR is special case of FTR with the form of transition to complete 
replacement (FTCR), in which the replacement of all logic variable is 
simultaneously made. 

Definition 13. Operation of equivalence of propositions A and B 
is identified by a symbol “ . The value of the expression A ^ B is 

determined from the following relations: 

0-0 = 1; 0~1 = 0; 1-0 = 0; 1~1 = 1. (7.6) 



Definition 14- The negation of the equivalence of the propositions 
A and B (this operation names as logic summation modulo two) is de- 
noted by the symbol V or 0. The value of negation of equivalence of 
propositions A and B is determined from the following relations: 

000 = 0 ; 001 = 1 ; 100 = 1 ; 101 = 0 . 

Sometimes this operation is named the strict disjunction and denoted 
by “VV” (or V). In this case, the sign, connecting the propositions A 
and B, is understood not in sense “or”, but in sense “or-or”. From the 
relation (7.6) it is obvious, that the strictly dividing proposition AVB 
is true only when A is false, B is true and when A is true, B is false. 

For the logic summation modulo two the commutative and associa- 
tive laws take places, along with the distributive law over the operation 
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of the conjunction: 



29. AeB = BeA; 

30. A 0 (S 0 C) = {A 0 B^ 0 (7; 

31. A A {B e C) ^ {A A B) e {A A C). 

The obvious relations can be derived: 

32. ^0 1 = A'; 34. A0A = O; 

33. AeO = A- 35. A0^' = 1. 

The above mentioned basic logic operations are connected with the log- 
ical summation modulo two by the following formulas: 

36. AVB^A®B®AB; 

37. AAB^AeAB'] \ (7.7) 

38. AeB^AB'vAB. 

Definition 15. The Boolean difference (or the logical difference) of 
the function /(a^i, . . . ^Xn) with respect to argument xi is the result of 
the logic summation modulo two of the initial function and the function, 
received from the initial one by the replacement of argument xi by its 
negation: 

Aix^fixi, ...,Xn) = f(xi, . . . ,Xi,. . . ,Xn) e f{xi ,. .., X 0:^) . (7.8) 

Definition 16. We shall say that a function f{xi,X 2 , . . . , Xn) is sym- 
metric with respect to Xi^ if 

/^/(xi, . . . ,Xn) = f{xi,...,x'i,...,Xn)- (7.9) 

Definition 17. Functions, obtained by replacement in the initial FAL 
of the argument Xi by 1 and 0, is named the unit and zero functions with 
respect to argument Xi and depicted accordingly: 



flixU" 


■,Xn) =/(xi,.. 


. , 1 , . . . , Xn)i 


(7.10) 




■,Xn) = f{xi, . . 


. ,0,. .. ,a;„). 


(7.11) 
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Definition 18. The function f(x \, . . . , Xn) is the monotonous one, if 
for any sets (ai, . . . , a^) and (6i, . . . , 6^), such that < bi, the following 
relation 



holds. 






Definition 19. The function, written down in the form of a matrix, 
in which conjunctions are the logic symbols in a line, and disjunctions 
are in a column, is named the logic matrix. 



To the logic matrixes all the known transformations of the algebra 
of logic can be applied. So, the commutative law for conjunction al- 
lows rearrangement of symbols in a line, and the commutative law for 
disjunction allows rearrangement of lines of the logic matrix. 



Let FAL have the form; 



f(xi. . ..,xs) ^ {{a?i Ax^A [x5 V {x^ AxqA a?8)]}V 

V{x2 AX4 A [xq V (x3 A X5 A aJs)]}} A Xj. (7-12) 



In the matrix form the equation (7.12) can be written as follows: 



f(xi,...,xs) 



X1X3 1 


2^5 


X7 = 


a:i:t;3rc5X7 


i 


X4X6X8 




xixsX 4 XeX 8 Xr 


X2X4 


Xq 






1 


X3X5X8 1 




3:2 2:4273 2:5 7 



(7.13) 



The second matrix of the equation (7,13) is written down in DNF. 



The inversions law (7.2) for logic matrixes is applied by replace- 
ment of conjunctive connections of logic symbols in a line to disjunctive 
connections of negations of these symbols, placed in a column, and dis- 
junctive connections between lines to conjunctive connections between 
columns, formed from these lines. Applying the inversions law to the 
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logic matrix (7.10), we obtain 



f{xi, . . .,xsy 







0:; 


x{ 


x'2 


x '2 


X1X3X5X7 


/ 


^3 


^3 


x'4 


x'4 


0:10:33:40:63:82^7 




0:5 


X4 


Xq 


^3 


0:20:40:60:7 




0^7 


Xq 


X? 




0:20:40:30:50:80:7 






x'g 




^ 00 








Xj 




^7 



7.4 Some theorems of Boolean algebra 
and probabilistic logic 



The close connection between the event probability theory and the math- 
ematical logic was observed a long time ago. Now the mathematical logic 
and the of probability theory are united on the new basis of the logic 
and probabilistic calculus. 

The probability theory quantitatively estimates the reliability or 
safety of systems, which structure is described by means of the mathe- 
matical logic. 

In practical application of the logic and probabilistic methods of re- 
search of reliability and safety of structural-complex systems the basic 
difficulty is transformation of arbitrary FAL to the forms of transition 
to complete replacement (FTCR). In order to make this transformation 
standard and mathematically strict ones, it was necessary to construct 
the a novel “bridge” between the algebra of logic and the probability 
theory. The history of creation of LPM and contribution of the individ- 
ual scientists to its creation and development are described in work [60]. 
Omitting the strict proofs of the special theorems, properties and algo- 
rithms, which form the mathematical basis of LPM, here we formulate 
only their essence needed for the subsequent practical application. 

Theorem 1. Arbitrary FAL, depending on n arguments n > 1, can 
be given in the form : 

f{xi, ...,Xn)= Xifl'\xi,. ..,Xn)V x'j^'^Xi, . . . , Xn). (7.14) 

The expression (7.14) is known as Shannon’s formula of expansion. 
It is correct also for the algebra of modulo two. Applying the rule 36 to 
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the right part (7.14), we obtain 

f{xi,. .. ,Xn) = ...,Xn)y x'j^'"\xi, . . . , Xn) 

= Xif["\xi, ...,Xn)® x'j^"\xi, ...,Xn) 
eXix'j["\xi, . . . ,Xn)f^^\xi,. ..,Xn) 
= Xifl'^ (xi, . . . , Xn) e x'j^'\xi, . . . , Xn). 



Corollary 1. The Boolean difference of arbitrary FAL with respect 
to argument X{ can be written as follows: 

A:^J{Xi,...,Xn)^ {xi,...,Xn)e fo\xi,..., X„) . (7. 15) 

For the proof of the equivalence of expressions (7.8) and (7.15) the for- 
mula of decomposition and rules 29-38 are used. According to (7.8) and 
(7.9) we have 

Axj{xi, ...,Xn)^ f{xi,. . . ,X„) © fx'.ixi, . . . ,Xn) = 

= [Xifi\xi, ...,Xn)® X-f^'\xi,. . . , Xn)] 

© [x'j['\xi, . . . , X„) © Xif^"'\xi, . . . , Xn)] 

= (Xi © x'^f['\xi, . . . , Xn) © (X- © Xi)f^'\xi, . . . , Xn) 
fi\xi,. . . , Xn) © fo\xi, . . . , Xn). 



Corollary 2. The Boolean difference of arbitrary FAL with respect 
to argument Xi can be presented using basic operations of conjunction, 
disjunction and, negation in the following form: 



Axifl (xi , . . . , Xn) — 



/f^(xi,...,Xn)*/'0^(xi,...,Xn) 

//J'^(xi,...,Xn)*/(5'^(a:i,...,Xn) 



The latter corollary follows from formula (7.15) and rule 38. 

Theorem 2. It is possible to present any FAL, depending on n argu- 
ments (n > 1), in the form: 



/(Xi, . . . , X^, Xi-^i, . . . , Xn) — 

\J x^x'T ■ ■ ■ /(ai, 012, • • • , Oi, 2^i+i, ■■■,X„). 



(7.16) 
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This theorem is named the theorem of decomposition of any FAL with 
respect to any number of arguments xi, X 2 , ■ . . , It is also correct to 
name the expression (7.16) the decomposition formula by D, A. Pospelov, 
who proved the theorem 2 in 1964, 

After decomposition of FAL in all n arguments, we obtain the CDNF 
of initial function, which can be written down in the form 

f(xi,...,Xn) = VX^^X 2 ^ ...x^^, 

where the symbol V means, that the disjunction is taken only on sets 
(ai,a 2 ,. . . ,<a„), satisfying the equality 

f {pi\ ) C^2 5 • • • 5 0 ^ 12 ) 1« 

Theorem 3. For all monotonous FAL the set of sets, on which the zero 
function with respect to argument Xi accepts unit value is the subset of 
the set of sets, on which the unit function with respect to the argument 
Xi is equal to unit, i.e. 

{(xi, . . . ,a;n) : . . . ,a;n) = 1} 

C {(a:i,...,Xn) : f["\xi,...,Xn) = 1}. 

We present five consequences of theorem 3 

1) {{xi,...,Xn) : f^"\xi,...,Xn) - 1} C 

C {(a:i, ...,Xn): f{xi, . . .,Xn) = 1} C 

C {(xi, . . . ,Xn) : . . . ,a:n) = 1} 

2) f['\xi, ...,Xn)yfo\xi,...,Xn)= fi\xi, ...,Xn)] 

^)fl\xi, ...,Xn) A fo\xi,. . . ,Xn) = fo\xi, - • • ,Xn); 

4^)fl\xu ...,Xn) A f'oHxi,. ..,Xn)= Aa;J(xi, . . .,Xn)] (7.17) 

5)f'l\xi,. ..,Xn) A fo\xi, ...,Xn) = 0. 

The formulas essentially facilitate logic transformations for monotonous 
FAL. 

Theorem 4- The partial derivative from the probability of the truth 
of monotonous FAL f(xi, . . . ,Xn) in the probability of the truth of the 
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argument X{ is equal to probability of the truth of the Boolean difference 
of this function with respect to the argument xf. 



dP{f{xi, ...,Xn)^l} 

dP{xi = 1 } 



P{Aa:J{xi,...,Xn) = 1 } • 



Theorem 5. The probability of the truth of any FAL, presented in 
ODNF, is equal to the sum of probabilities of the truth of all orthogonal 
members in this FAL: 

plf{xi,. ..xn)^y ’ 

where Oi can be not only elementary orthogonal conjunctions of ODNF, 
but also arbitrary FAL, orthogonal in pairs. 

Theorem 6. The disjunction of orthogonal iteration-free forms in 
the basis of conjunction-negation is the transition form to the complete 
replacement (FTCT). 

This assertion follows from theorem 5 and the fact that each term in 
the initial disjunctive form is FTCT. 

Now some forms of transition to the complete replacement are known: 
PDNF, ODNF, iteration-free FAL in the basis of conjunction-negation. 

If FAL is presented in FTCT, then the transition to the probabilistic 
function is carried out by the following rules: 

1) Each letter in FTCT is replaced by the probability of its equality 
to unit 



P {xi = 1} = Ri, P {xi = 0} P {x[ ^ 1} ^ Qi ^ 1 - Ri\ 

2) The function negation is replaced by the difference between unit 
and the probability of equality of this function to unit, for example, 

P{f{xi, ...,X 7 ) = [ixiX2y{x3X4)'{X5{x'^Xjyy]' = 1 } 

= 1 - (1 - R 1 R 2 KI - R3R4)[1 - Rs(l - QeQi)]-, 

3) The operations of the logic multiplication and additions are re- 
placed with operations of the arithmetic multiplication and addition. 

PF for FAL, written in any iteration-free form, can be found from 
its expression in the basis of conjunction-negation, which is obtained by 
repeated application of de Morgan’s rules (7.3). 
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Let, for example, 

f{xi, ...,Xs) ^ xi{x2 y XsV x'^) V X^{xq V X'jx’^) 

and one should find P{{x \^ . . . , xg) = 1}. As this function is iteration- 
free FAL (though it is not DNF), we have 

f{xi, ...,xs) = {[xi(x2a;3^4)T{^5[4(^7a::8)]'}'}'; 

-P{/(^lj . . . ,a:;8) — 1} — 1 - {1 - -Ri[Q 2Q3-^4]} 
x{l - R^[l - Qq{ 1 - RjQg)]}’ 

In the conclusion, we emphasize again, that it is only the bases of the 
logic and probabilistic calculus. Specific logic and probabilistic methods 
will be described below. Besides, it is necessary to keep in mind, that in 
the fundamental mathematical encyclopedias and directories LPM are 
not mentioned yet, and, hence, and are not studied by pure mathemati- 
cians it universities. Practically all creators of modern understanding of 
the probabilistic logic, as well as J. Boole, did not have special mathe- 
matical education, being high quality engineers and applied mathemati- 



cians. 




Chapter 8 



LOGIC AND PROBABILISTIC METHOD 
AND RISK 



The logic and probabilistic method (LP-method), created by I. A. Rya- 
binin, is presented below mainly on the basis of his works [61-63]. 

8.1 Basic concepts and definitions of the theory 
of risk and safety 

The scientific approach to the problem of safety requires carrying out 
the integrated analysis, classification of failures and accidents, basic in- 
fluencing factors, behavior of environment and actions of the person- 
nel. For answering these questions appropriate methods of mathemati- 
cal modelling, physical and economic models of origin and development 
of technical and economic accidents are necessary. 

We do not have pretensions to create the general theory of safety and 
risk of any complex systems and below we shall only consider approaches 
to development of the risk and safety LP-theory of the structurally- 
complex systems. However, this LP-theory can be the basis for other 
concepts of safety and risk which take into account not only logic con- 
nections, but also other connections: physical, functional, economical, 
organizational, financial etc. 

First of all, by structurally-complex systems (SCS) we understand 
the systems, which at their mathematical description can not be re- 
duced to consecutive, parallel or treelike structures. The structurally- 
complex systems are described by a scenario of the network type with 
cycles and recurrence of arguments at their formalization. Secondly, 
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by structurally-complex systems we understand also the systems with a 
large number of states both for system elements and the system itself. 

The structure of connections inside society, business, finance, etc. 
is not simple. These systems have large number of interconnections 
and states of elements and the fact is not always taken into account in 
mathematical models of risk. In this chapter and below the original risk 
LP-theory for complex technical, organizational, and banking systems 
is stated; the theory takes into account the above mentioned features of 
SCS. 

Fundamental concepts of the risk LP-theory are the concept of the 
dangerous state of the system, characterized by the large-scale damage, 
and the concept of the danger, that is, the ability of the system to get 
to a dangerous state. 

In each particular case it is necessary to give the analytical descrip- 
tion of that dangerous state of SCS, which can result in the accident. 
In the risk LP-theory such description begins with drawing up of the 
scenario of the dangerous state, which is done with the help of conjunc- 
tions (AND) and disjunctions (OR) of initiating events and conditions. 
They are various external and internal influences, failures, violating the 
service and storage conditions, mistakes of personnel etc. 

In the reliability theory the formalization of the concept of efficiency 
is carried out with the help of the structural diagrams of functioning. In 
the risk theory the formalization of the concept of the dangerous state 
is done with the help of the scenario of the dangerous state. 



8.2 The basic principles of the LP-method 



To each logically connected element of system corresponds the logic vari- 
able Zj, j ~ 1, 2, . . . , 77- which describes the state of the element j: 



Zj = 




if the element j is serviceable, 
if the element j is out of order. 



Then all the set of the possible states of the system can be presented 
by the set of vectors {Zn} consisting of 2^ various vectors. 

In some tasks on the graphs the routes as sequence of graph edges 
are sought. The route, which does not contain repeating arches in the 
oriented graph, is named a path. The presence of the path in the graph 
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of the structural system corresponds to its serviceable condition. In LP- 
method the following definition is used. The minimum path of system 
functioning (MPSF) represents such a conjunction of its elements in 
which none of its components may be withdrawn without disturbing the 
functioning of the system. Such a conjunction may be written in the 
form of the following FAL: 



= A Z. 

jeKwi 



where Kwi is the set of the numbers corresponding to the given path. 



In other words, MPSF describes one of the possible independent 
variants of fulfilling the task by the system with the minimum set of 
efficient elements which are absolutely necessary to perform the given 
work. 



In some tasks on the graphs it is required to find the set of edges, 
named the cut or section, such that in moving away from the cut the 
graph loses its integrity and breaks up into two or more components. 
From the point of view of reliability it would indicate loss of serviceabil- 
ity. LP-method defines the minimum section of system failures (MSSF) 
to be such a conjunction of the negations of its elements, in which none 
of its components may be withdrawn without disturbing the condition 
of inefficiency of the system. Such conjunction may be written in the 
form of the following FAL: 



Si^ A 
ieKs- 

where Ksj means the set of the numbers corresponding to the given cut. 

In other words, MSSF describes one of the possible versions of dis- 
turbing the capability of the system to work with the help of minimum 
set of failed elements. 

MPSF and MSSF are dual in the relation to each other. Each real 
system has a finite number of minimum paths (1=1,2, . . . , d) and mini- 
mum sections (t=l,2, . . . ,n). Utilizing these concepts the conditions of 
capability of a system to work may be written differently: 

a) either in the form of disjunction of all minimum paths of system 
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Figure 8.1. Structural model of risk of “bridge” type 
functioning (MPSF) 

,Xm) = W Wi= y A Xi ] (8.1) 

l~\ l=\ i^Ki 

b) or as the conjunction of negations of all minimum cut of system 
failures (MSSF) 

. , n / n 

y[xi , . . . = V F' = V V Xi . 

j-i j=i 

Thus, the conditions of capability of a real system to work may be 
represented in the form of conditions of capability of a certain equivalent 
system (in the sense of reliability) whose structure is taken to be parallel 
connection of MPSF, or any other equivalent system the structure of 
which is a serial connection of negations of MSSF. 

MPSF or MSSF form the complete probabilistic space of events. 
Formula of the type (8.1) as disjunctions of conjunctions and without 
brackets is named the disjunctive normal form (DNF). The number of 
conjunctions in DNF defines the dimension of DNF. 

Example. As an example, we write down the logic expressions 
for MPSF and MSSF for “bridge” (fig. 8.1), which we consider as the 
electrical circuit. 

The minimum paths of system functioning (MPSF) 

?/ = 2/3 V 2/4 = .^ 1.23 V .^2^4 V Z 1 Z 4 Z 5 V .^2^3 ^ 5 ; (8-2) 
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The minimum sections of system failures (MSSF) 
y = V V 2:12:4^5 V 



8.3 Transformation of L-function to 
P-polynomial 

The algorithms of orthogonalization is based on transformation of FALs 
to an orthogonal disjunctive normal form (ODNF). The transition from 
the risk logic function to the risk probabilistic function (the polynomial) 
is not simple. It is connected with orthogonalization of the risk L- 
function which is written down in DNF . Only for the orthogonal DNF 
it is possible to replace the variables Zj and Zj by the probabilities Pj 
and Qj. We replace the mark of disjunction V by the mark of addition 
+, and the mark of conjunction A by the mark of multiplication •. Let 
us describe some methods of orthogonalization of L- functions. 

Method of the direct orthogonalization. Let DNF be written down in 
the tabular form [1,2]; 





2:1 A 2:3 A 2:5 




Ki 


F{Z) = 


Z2 A Z4 A Z6 


- 


K2 




zi A Z3 A Z4 A ze A zg 




K3 



where conjunctions stand in lines and disjunctions stand between lines. 

Procedure of the direct orthogonalization is performed following the 
scheme: 



F(Z) = 



_ 

ki A /c2 
/ci A /c2 A 






ki 



zi 

zi Azs 
zi A Z3 A Z5 



The dimension of the function Y(Z), as it is easy to see, may es- 
sentially increase in result of the orthogonalization. Therefore other 
methods of orthogonalization of logic functions were suggested and de- 
veloped. They are adapted for calculation on the computer and not 
so demanding to resources of memory. Amidst the methods we should 
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name the algebra of cortege and the algebra of mixed forms and recur- 
rence sequences [1,2]. 

Orthogonalization of logic function by the method of conditional prob- 
abilities. As an example, let us consider the orthogonalization of the 
logic function by the method of conditional probabilities for a “bridge” 
(fig. 8.1). We shall denote conditions by the symbol 



2/ = 2/3 V y4 = ^ 1 Z 3 V .^2-^4 V ^1^42:5 V 
r = V ATs V Ks. 



For the probability of the first logic term we have 
P{Ki} = P1F3 = Ai. 

The probability of the sum of two logic terms is as follows 

F{Ki V K2} = P{iFi} + F{K2} ~ F{K2) * P{iFi I P2 = 1} 
= P1P3 + P2P4 - P2P4 * F{ZiZ3 \K2 = 1} 

= P1P3 + P2P4 “ P1P2P3P4 = Ai2. 

Probability of the sum of three logic terms is equal to: 

F{Ki V P2 V K3} = F{Ki V K2] + P{Pa} 

-F{K3]^F{KiyK2 I ^3 = 1} 



= A12 + P1P4P5 — P1P4P5 * P 
= Ai2 + PiP 4P5 -PiP 4P5*P 



2^1 


^3 


^2 


2:4 


1 


^3 


^2 


1 



= Ai2 + P1P4P5 - P1P4P5 * P{'2^2 * Z3} 
- Ai 2 + P1P4P5 - PlP4P5(l - Q2Q3) 

= Ai 2 - P1P4P5Q2Q3 = A123. 



= 1 



Above we used the rule of variable replacement taking into account 
conditional probabilities and de Morgan’s theorem of replacement of 
disjunction by negation of conjunction. 
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For probability of the sum of all four logic terms we get 



P{Ki V iFs V isTs V K 4 } - P{Ki V iFs V K 3 } + 



= ^123 + P2P3P5 - P2P3P5 * P 

= ^123 + P2P3P5 — P2P3P5 * P 
= ^123 + P2P3P5 - P2P3P5 * P 




i^4 = 1 



~ -^123 + P 2 P 3 P 5 - P2P3P5(1 - Q 1 Q 4 ) 

= ^123 + P2P3P5Q1Q4 = ^1234- 



Here we also used the absorption law. 

The final expression for P-polynomial can be obtained by making 
substitutions of Pi, Qi instead of 211 ,^ 12 ,^ 123 : 



P{Y = 1} = 2 I 123 + P 2 P 3 P 5 Q 1 Q 4 = ^12“PlP4P5<32Q3 + p2P3P5QlQ4 
= P 1 P 3 + P 2 P 4 - P 1 P 2 P 3 P 4 - P 1 P 4 P 5 Q 2 Q 3 + P 2 P 3 P 5 Q 1 Q 4 . (8.3) 



8.4 “Weight” of the argument in the L-function 

8.4.1 Calculation of Boolean difference 

The boolean difference for FAL with respect to Xi can be calculated 
using the expression (7.8): 

Af(Xrn) = f(xi, . . . ,Xi, . . . ,Xm) ® f {Xl, . . . ,Xi, . . . ,Xm) , (8.4) 

where © means summation in module 2. We shall need the following 
notations: 

^ == Xm) is the initial function of FAL; 

P “ /(^i) ‘ ,Xi, , Xm) is the function with is symmetric in X{ to 

the initial one. 

Using the relationships between operation © of summation in module 
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2 and basic logic operations ( see the rule 38) 

AeB = AB'vA'B, 

we write down the expression (8.4) in the following form: 

f{o^l Xm) = A^B 

^ABVAB. 

The boolean difference for FAL with respect to Xi may also be cal- 
culated from expression (7.15): 

A:cif{xi, ...,Xm) ^ ...,Xm)® {xi, . . . , X.^) , 

where 

fl^\xi , . . . , Xm) — f (xi^ Xm) 1® the unit function with re- 
spect to argument Xi (7.10); 

fo^ (^1) • • ■ 5 ^m) — /( 2 ^i 5 • • • ? 0, . . . , Xm) Is the zero function with re- 
spect to argument xi (7.11). 



8.4.2 Calculation of element’s weight in L-functions 

“Weight” of the element X{ in a system consisting of m elements is the 
ratio of the weight of the boolean difference of argument Xi to the number 
of all sets of the m-dimensional logic space 



9xi — 



C {Axif (2^1, • • < 5 Xm)y 
2m 



(8.5) 



where 



G{Axif{xi,...,Xm)} ( 8 . 6 ) 

is the “weight” of the Boolean difference of FAL of argument Xi, equal 
to the number of sets, on which the Boolean difference A^^fixi , . . . , Xm) 
accepts the value 1. 

The “weight” of the Boolean difference (8.6) characterizes the role 
of an element Xi in structural reliability of the system, ft is convenient 
to use relative value for measurements of “weight” of an element for this 
purpose one can use the formula (8.5). 
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If the L-function is given in ODNF, the “weight” of the logic function 
by definition can be written down in the following form: 



9Y(xi,...,Xm) 



k 

2m—rf 

/=1 



2m 



k 

/=1 



where k is the number of orthogonal conjunctions in the logic function; 
m is the number of arguments of function; rj is the rank of elementary 
orthogonal conjunction. 

For monotonic FAL according to theorem 3 and formula(7.4) we have 
A^iY 1 "/'^ (xi,...,Xm)Y (xi , . . . , (8.7) 



Substituting Boolean difference (8.7) in the form of difference of sets 
A^iY{xi,. ..,Xjn)= Y}''\xm-l)/Yf’^Q\xm-l), 
where the functions Y-^^\Yq^^ are written down in ODNF, we find 



G{A,,y(:r^) = G{Yl^\xm-i)} - G{Y^^^> (xm-i)} 






k I 



E2 

/-I 



( 8 . 8 ) 



where 

k^Vf are the number and the rank of orthogonal conjunctions con- 
taining argument Xi ; 

l,rj are the number and the rank of orthogonal conjunction, con- 
taining negation of the argument Xi. 

Dividing expression (8.8) by 2^, we obtain the formula for calcula- 
tion of the “weight” of an element Xi in the system 

/=i i=l 



(8.9) 
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8.4.3 Examples 

Example 1. Let us determine the “weight” of elements x\ and in 
DNF (8.2) for the system shown in fig. 8.1. By applying algorithm of 
orthogonalization to FAL (8.2) written down in DNF, we obtain 



Y{xi,.. .,x^) 





X3 








X2 


X3 


X4 






Xl 


X2 


X3 


X4 




Xl 


X2 


X3 


X4 


X5 


Xl 


X2 


X3 


X4 


X5 



( 8 . 10 ) 



The above formula differs from (8.3), because we used another algo- 
rithm of orthogonalization and the terms in the initial L-function were 
written down in another sequence. Such variation is usual phenomenon 
in orthogonalization. 

To make clear the formula (8.8), we write it for calculation of “weight” 
of Boolean difference of argument x\ for (8.10) in detail: 



G'{A^iy(:T5)} 
= G 



G 



X\ X2 X2, X4 
Xi X2 X3 X4 X5 



XI X3 

Xl X2 X3 X4 X5 

= f 2^ + 2M - [ 2^ + 2M = 18 - 6 = 12. 



(8.11) 



From (8.5) we have: Gxi = 12/32 = 0.375 and by (8.9) we obtain 

gxi = [2-(2-D + ] - [ 2-(4-i) + 

= [2“^ + 2-^] - [2-^ + 2"^] 

= (0.5 -b 0.0625) - (0,125 + 0.0625) - 0.05625 - 0.1875 - 0.375. 



For argument x^ we write down 



G{A,5y(a:5)} = G^{ 



Xl 


X2 


X3 


X4 


X5 


Xl 


X2 


X3 


X4 


X5 



} - G{6} 



^ - 0 = 2 * 2^ = 4, 
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- 4/32 - 0.125. 

Thus, not using probabilities, we have managed to estimate the struc- 
tural reliability of elements xi,x^ by determination of their “weight”: 
9x1 ‘ 3 ^ 3 , 5 - 

Example 2. Let us find the weight of the first element z\ in the 
following L-function 

Vl {zi, Z2,Z^) = Zl^Z2^Z2,^Zl Z2 , (8.12) 

It is determined from the expression for the logic difference (8.12) 
of argument zi: 






^ 1 ^ 2 ^3 







^1 
















V 






-^1 


Z2 


Z3 




Zl 


^2 


^2 


^1^2^3 = 














Zl 


Z2 


Z3 


— 


Zl 


^3 




^3 















2 : 22:3 2 : 22 : 3 . 



As it was shown in [2], the weight should be calculated for Ri = R 2 = 
i?3 = 0.5 : 



9zj = = 1} = i? • i? = 0.5 • 0.5 - 025. 

Thus, in consecutive structure pi a dangerous situation appears with 
probability 1/4 because of the initiating condition zi. 

Example 3. Let us find the weight of the first element zi in the 
following L-function 



^2 = V 2:2 V 2 : 3 . 



(8.13) 



Let us write down (8.13) in ODNF 



j/2 = V 222:1 V 232122 - (8-14) 

Analogously to (8.11), we obtain expression for the weight of Boolean 
difference (8.14) of the first element 21 



Zl Z2 
Zl Z 2 23 



G(zi)-G 



23-(i-i) _ [23-(2-i) ^ ^ 2. 
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Since 2 ^ = 8 , according to (8.5), we have: Qzj = 2/8 = 0.25. 

Thus, in the parallel structure y 2 a dangerous situation appears with 
probability 1/4 because of the initiating condition zi. 



8.5 “Importance” of elements in a system 

“Importance” of elements in the system, in contrast to the “weight” , is 
determined not by the logic model, but by the probabilistic model. The 
following expression is used ( see [2]): 

e = dPa/dP, = P{A,,Y{Xm) = 1}. (8.15) 

For the L-function (8.10) the probabilistic polynomial can be written as 
follows; 

Pc - PiPs + P2Q3P4 + Q1P2P3P4 + Q1P2P3Q4P5 + PiQ 2 Q 3 P 4 P 5 - 

(8,16) 

Let us calculate the “importance” of the elements x\ and x^: 

dPc/dPi = P3 - P2P3P4 - P2P3Q4P5 + Q2Q3P4P5] (8.17) 

dPc/dP^ - Q1P2P3Q4 + P 1 Q 2 Q 3 F 4 . (8.18) 

In work [2] it was shown that by substituting values 0.5 for ail i — 
1, 2, . . . , m into the formula (8.15) instead of probabilities of arguments 
Xi and Xi we obtain one more expression for the “weight” of elements: 

g^i = P{A^,y(X^) = 1} I i?i = . . . = = 0.5. (8.19) 

Let us check up this rule using expressions (8.17) and (8.18): 



= dPcIdPi - 0.5 - 0.5 • 0.5 • 0.5 - 0.5 • 0.5 • 0.5 • 0.5+ 
+0.5 -0.5 -0.5 -0.5 = 0.375, 

= dPcIdP^ = 0.5 • 0.5 • 0.5 • 0.5 + 0.5 • 0.5 • 0.5 • 0.5 = 0.125. 



It is easy to see that the analytical expressions for “weight” and “im- 
portance” may be cumbersome and very labor-intensive in derivation , 
but usually it is possible to avoid them, if there is a computer program 
(see Chapter 14). Then the “importance” of an element is easily deter- 
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Figure 8.2. Object of accident 



mined: 



= Pc \ Pi ~ 1 — Pc \ Pi ~ 0 



8.6 Example of construction of the L-function 
of danger 

Let us estimate a submarine sinking danger. For the submarine sinking 
it is enough to fill with water one of compartments. Filling the com- 
partment can occur through a hole or other violation of watertightness. 
To struggle for survivability of a boat in each compartment there is the 
pump that can take may out certain quantity of water. Besides, between 
pumps Hi and H 2 there is dam CR, enabling under certain conditions 
to remove water with the help of the adjacent module pump (fig, 8,2). 

It is required to evaluate submarine sinking risk during a certain pe- 
riod. It is naturally to accept that the dangerous state is the fact of sub- 
marine loss. The scenario of dangerous states, resulting in destruction 
of the submarine, after accounting all possible states Zi is represented 
schematically in fig. 8.3. Here initiating events are z\ and 22 , the holes 
in compartments No l,No 2, and the events Z 3 and ;S 4 — failures of 
pumps Hi, H 2 - The event Z 5 means that access to the dam valve of an 
emergency compartment is impossible. 

Let us construct the function of dangerous condition with the help 
of MPDF: 



y(zi, . .. ,zs) = Z1Z3Z4 V Z1Z3Z5 V Z2Z4Z3 V Z2Z4Z5, 



( 8 . 20 ) 
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y{zi,...,Z5) 





^3 


Z 4 

Z5 


^^2 


Z 4 


Z3 

Z5 



The function of the algebra of logic (8.20), written down in DNF, is 
monotonic and recurence one. Inverting FAL (8.20), we obtain the func- 
tion of system safety (FSS): 



y'{4. 




z{ z'^ 

A A 
A A 
A A 



Six MSDS in the latter formula 



Si = z[z2, S2 = z'iz\, S3 = Z2Z3, S4 -- z'^z'4, S5 = 445 *^6 = 



'^ 4-^5 



indicate those conjunctions, which completely “protect” the system from 
danger (in this case, from submarine sinking). 
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Z] Z3 Z5 Z 4 Z 2 




relation of type "OR" 



- relation of type "AND" 



Figure 8.3. Scenario of dangerous state 





















Chapter 9 



AUTOMATED STRUCTURAL AND LOGICAL 
MODELLING 



A.S.Mojaev’s methodology and technology of automated structural and 
logical modelling suggested and developed by him in [4, 66-68] is de- 
scribed. His proposals have much larger capabilities in comparison with 
the methods based on trees of events and failures, graphs of arcwise 
connectedness, structural and logical methods of risk modelling and cal- 
culation of parameters of reliability, safety and risk of structurally com- 
plex systems of objects and processes. By a simple example we shall 
describe the technique for construction of schemes of the functional in- 
tegrity (SFI) and algorithmic methods for automatic construction of 
LP-models, These tools are realized in the software complexes for au- 
tomated modelling of reliability, safety and risk of systems. Essentially, 
SFI are the graphical scenarios of successful operation or emergency 
condition of the complex system. 



9.1 Problems of LP-modelling 

In the last years some classes of methods of structural analysis were used 
for calculation of probabilistic parameters of reliability, safety and risk 
of complex systems. The most used of them are the methods of event 
trees, failure trees, logical-probabilistic, topological, logical-graphic ones, 
GO-technology, etc [32,33,69]. The mentioned methods have common 
methodological basis, which can be characterized by the following posi- 
tions: 

• All the above mentioned methods for description of elements in models 
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of reliability, safety and risk (we will name them as risk models) of 
systems use simple (binary) random events with two incompatible 
outcomes, such as success or failure, an operation is done or it fails, a 
device is turned on or off, etc). 

• The main way of statement of problems is the construction of a struc- 
tural model (scheme) of operation of the investigated system or a 
scenario of emergency appearance. 

• The algebra of logic is the mathematical base for modelling in these 
methods. 

• The main form of description of the risk models determined model of 
the system is the logical function. 

• Different types of computational probabilistic (analytical, statistical, 
markov) or other models for the quantitative estimation of various 
risk models properties of the investigated system are determined on 
the basis of the logical model. 

• The values of parameters characterizing reliability, safety and risk of 
the system are determined on the basis of logical and computational 
probabilistic models. The same models are used for various techniques 
of development and substantiation of research, design, operational and 
other management solutions. 

• All the most cumbersome and labor-consuming stages of structural 
and logical modelling (construction of logical functions, computational 
probabilistic and other models, carrying out calculations and result 
application) are aimed as much as possible to be automatized and 
realized on a computer. 

In the present work we generalize the experience of development and 
application of one of new trends in the structural and logical modelling 
of reliability, safety and risk of operation of systems [4, 66-68] on the 
basis of generalization and development of the logical and probabilistic 
method and of the special tools for construction of structural models 
called by the schemes of functional integrity. 

An important part in successful development of the theory and prac- 
tice of the logical-probabilistic modelling has been played, by the fact 
that by their nature these methods are well adapted to full automation of 
the most complex, laborious and cumbersome processes of construction 
of computational mathematical models of various properties of investi- 
gated systems. The realization of such new information technology of the 
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automated structural-logical modelling (ASLM) has allowed the general 
audience to access the software for operating and multivariate analysis 
of various system objects and processes [4,66-68], models of which, in 
view of the structural complexity and high dimension, cannot be con- 
structed by traditional manual ways of modelling. The development of 
such software is founded on development of a set of special algorithmic 
methods for modelling, which permits to realize by a computer all main 
stages of construction of logical and probabilistic models of systems of 
arbitrary given structure. 

9.2 Risk scenario of a railway accident 

The SFI tool and basic algorithmic methods of modelings intended for 
realization by a computer of all stages of ASLM technology are consid- 
ered. The SFI tool and the algorithmic methods of ASLM technology 
are illustrated by the simple example of probabilistic safety analysis of 
a hypothetical railway segment; , its scheme is shown in fig. 9.1. In this 
example we take into account two initial causes of possible emergency: 
the fracture of the rails and/or appearance of an object on the way. In 
case of the fracture of the rails and failure-free operation of the indicator 
the green traffic light is replaced by the red signal. If the engine driver 
see the object on the rails and/or the red signal of the traffic light, he will 
switch on the train breaking system. Then, under condition of failure- 
free operation of the break system, the railway accident is prevented. It 
is required to construct models and to calculate the probabilistic char- 
acteristics of safe operation of a segment of the railway and appearance 
of emergency, and also to determine the significance and contributions 
of each indicated element to safety of the considered system as a whole. 

Basically (with some accuracy), the considered problem can be solved 
by any of the listed above methods of structural modelling, that allows 
the interested reader to test propriety and to estimate efficiency of the 
considered below algorithmic methods of ASLM technology. 



9.3 Idea of development of LP-modelling 

This idea is very simple and founded on the following two rules; 

1. All elements i = l,2,...,n of the modelled object or process 
are represented by simple, binary events, which, during operation of the 
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system, can be only in two positions. Such binary models of elements 
are denoted by simple logical variables Xi = {xi,Xi}. The direct nota- 
tion of the logical variable is attributed to one, and the inverse one to 
an other possible outcome of the appropriate binary event. The own 
probabilistic parameters Pi, Qi — 1 — of realization, respectively, di- 
rect Xi and inverse Xi outcomes of each binary event are considered as 
directly given or calculated with the help of known techniques. In the 
considered example (fig. 9.1) for the probabilistic analysis of safety of 
a segment of the railway five binary events are fixed. In fig. 9.2 these 
events are indicated by the numbered circles and attributed to parts of 
the investigated system process. 
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Figure 9.1. The segment of a railway traffic 
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Figure 9.2. The examples of binary models of elements. 
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2. In the system each element i can execute (or not execute) some 
one (or many) output system function. The conditions of realization of 
this function by the element i are denoted by the integrative function yi. 
The conditions of non-realization are denoted by the integrative function 
y^. In fig. 9.3 the plots and substantive descriptions of output functions 
of each of five binary elements of the considered segment of the railway 
are given. 

The reasonable and purposeful division of the investigated system 
into logically connected sets of simple binary X{ E {xi,Xi} and composite 
functional yi E {yi^Vi} events is called the event-logical approach to the 
analysis of systems [4,68]. The possibility of the event-logical description 
of the system is the necessary and sufficient condition of applicability of 
the logical and probabilistic methods for model construction and analysis 
of different properties of the considered system object, 

With the help of one or several output functions yi E {yi->yi} that 
composite event is represented, which on intention of the model author, 
characterizes the investigated property of the system (reliability, safety, 
risk etc.). The simple logical variables Xi of outcomes of the indicated 
binary events are used as parameters of the formed logical models, and 
own probabilistic characteristics of the elements Pi.Qi are used as pa- 
rameters of the formed probabilistic models of the investigated system. 

It is necessary to note that the principle difference of the event-logical 
approach from the classic logical-probabilistic [2] and all other structural 
methods is the possibility of using in structural models not only but 
also the inverse yi of the output functions. This is the main reason which 
makes it possible to realize in ASLM technology all possibilities of the 
basic apparatus of modelling of the algebra of logic on the functionally 
complete set of operations AND, OR and NOT. On this basis it is 
also possible to automatize completely the processes of construction of 
all types of known monotonic models, as well as of the essentially new 
class of non-monotone models of reliability, safety and risk of operation 
of complex system objects and processes. 



9.4 Basic stages of LP-modelling 

Usually in logical-probabilistic methods four sequentially implemented 
stages are considered. In the automated structural-logical modelling the 
stages have the following contents: 
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1. Primary structural and logical modelling. At this stage the 
full formulation of the logical-probabilistic modelling problem is made. 
The formulation consists of three interdependent parts; 

1.1. The scheme of functional integrity G(X,Y) of the investigated 
system is designed on the basis of the fixed set of simple binary xi 
and composite functional yi events. Here X means the set of nodes 
(binary events and Y means the set of connecting arcs, (output 
and ensuring functions yi). SFI should be the analytically precise and 
rigorously formalized mapping of all the knowledge of conditions, which 
make it possible (impossible) for each element of the considered system 
to realize its output functions. 

1.2. The L-criterion of operation of the investigated system Yc = 
Yc{yi)-, i = 1, 2, . . . , n is set with the help of one or several output func- 
tions, This criterion determines (in a generalized form) that mode of 
operation or usages of the system, for which mathematical model should 
be constructed for quantitative estimation of the investigated property 
of the system as a whole. The complex and multifunction system objects 
can be characterized by several logical criterions, for each of which we 
should construct a mathematical model of the system. 

1.3. The probabilistic Pi^Qi and other parameters of all binary 
events f = 1, 2, . . . , n representing elements of the modelled system 
are directly determined or set. 

2. Definition of the logical function of the system efficiency. 

At this second stage of construction of the determine logical model of 
the process of operation of the investigated system Y^ = Yc{xi^Xi)G ~ 
1, 2, . , . , n is realized. The model represents the so-called logical function 
of efficiency of the system (FES) or the logical function of transitions. 
Arguments of this logical function are the simple binary events Xi] their 
own probabilistic parameters Qi are known. In this function, with 
the help of the logical sums, products and supplements (inverses) of 
simple random events, we determine, precisely and uniquely, the com- 
posite random event of realization by the system of given criterion of its 
operation, i.e. modelled property of reliability, safety or risk of the inves- 
tigated system as a whole. It is necessary to note, that (unlike the known 
structural methods [2,32,33,69]) SFI of L-criteria operation and FES 
are not limited by the condition of monotonicity [2] and can be both the 
shortest paths of successful operation and the minimum cross-sections 
of failures, and their arbitrary non-monotonic combinations, 
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3. Determination of the computational probabilistic model 
of the system. At the third stage the transformation of logical FES 
(and/or the logical function of transitions) is made into one of the 
forms, which permit direct calculation of probabilistic and other pa- 
rameters of reliability, safety and risk of the investigated system Pc — 
Pc{Pi^QiA)^ i — 1, 2, . . . , 71, At the moment there exist methods for 
obtaining four forms of computational P-models: polynomials of proba- 
bilistic functions, logical-statistical models, some sorts of Markovs and 
network (combinatorial and series) system models [4,66-68], 

4. Calculation of the system characteristics. At this final stage 
the parameters which are needed for the solution of different problems 
of systems analysis risks are calculated with the help of the obtained 
computational models. The outcomes of the calculations can be used, 
for example, for the normative estimation of properties of the system, 
comparison and selection of variants of its structure, optimization and 
synthesis of systems during scientific researches, designing, exploitation, 
development and substantiation of the management solutions in the field 
of reliability, safety and risk of operation of investigated objects. 

The stage of primary structural and logical modelling in its creative 
part, certainly, can not be automated. Here only the service compo- 
nents can be automated. However, all the subsequent and most cum- 
bersome stages of the logical, probabilistic modelling and calculations 
are completely automated [4, 66-68] . It became possible only after de- 
velopment of the algorithmic methods of modelling, that is maintenance 
of a very high, machine level of the formalism not only of the ways of 
representation of the initial, intermediate and final data, but, mainly, 
of the procedures of construction of logical and probabilistic mathe- 
matical models of systems. The most important setting and procedu- 
ral ways of formalizing of logic and probabilistic modelling are stated 
below. 

9.5 Algorithmic methods of primary structural 
and logical modelling 

The central place in the primary modelling, unconditionally, takes the 
process of construction of SFI. On the one hand, the tools of description 
of SFI should correspond to the abilities of the logical and probabilistic 
modelling (algebra of logic and probability theory), on the other hand, 
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they should have the level of formalism, sufficient for full automation of 
all subsequent stages. 

Partly the SFI apparatus has already been used (fig. 9.3) at descrip- 
tion of output functions of elements of the railway segment in the above 
considered example. In full the representational tools of the SFI are 
shown in fig. 9.4. First of all, we emphasize that in SFI all ways of 
description of system structures, which were traditionally used in event 
trees, failure trees and graphs of cohesion (consecutive and parallel con- 
nection of elements and cycles), are preserved. At the same time, in 
SFI some new tools of the graphic description of systems ensuring full 
realization of all possibilities of the logic algebra are introduced. 

The functional nodes of SFI are intended for description of elements 
i of the modelled system with the help of direct outcome Xi of the appro- 
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priate binary event. The fictitious nodes do not represent any elements, 
but allow us to depict on the graph the composite logical conditions, 
connections, relations between elements in the investigated system. On 
the output of each SFI node (both functional and fictitious) can be two 
types of output branches: lines yi (they mean realization of the output 
function of the element) and inverse y^ (they mean failure in realization 
of the output function). 

The realization or not realization of the output function y^ G {yi,y-^} 
is determined both by the state of the corresponding element Xi G 
and, generally, by certain sets (combinations) of output func- 
tions yj G {yj,yj} of other providing elements j systems. In the SFI 
graph the logical conditions of maintenance are represented by branches, 
which come to the given SFI node. The orientation of arcs is denoted 
by the point symbol (the conjunctive arc), or by the arrow mark (the 
disjunctive arc). The conjunctive arcs determine not reserved groups 
of maintenance functions, and disjunctive arcs correspond to the re- 
served groups. In the SFI apparatus between conjunctive and disjunc- 
tive groups of maintenance the conjunctive connection is established. 
It means that the direct output function yi of the node i of SFI will 
be realized only in the case, if the own event Xi occurs AND realized 
all without exception, the output functions yk of the conjunctive group 
AND at least one output function y^ of the disjunctive group is realized. 

The realization of the inverse output function of the element is deter- 
mined by the full logical inverse of all graphically mapped conditions of 
realization of the direct output function. The letter can be represented 
by the generalized structural fragment of SFI. Thus, by construction the 
SFI tool realizes all possibilities of the algebra of logic and the appara- 
tus is the analytically rigorous graphical form of the system of logical 
equations. Such system can always be restored from the graph SFI on 
the basis of (9.1). 

The process of construction of SFI includes some informal (creative) 
procedures, for example, choice of binary events (models of system el- 
ements), calculus of their probabilistic characteristics, determination of 
the contents of output functions of elements and graphic mapping of 
logical conditions of their realization. In practice it is convenient to 
define conditions of realization of output functions of elements at first 
fragmentary (separately for each node), and then to combine them in 
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the SFI of the system as a whole (see fig. 9.5): 

• f V fdV f A n V 

\d£D J \keK ) 

Y, = X,-( V Y^)-( A n), (9.1) 

\deD J \keK ) 

The graphic fragments of realization conditions of output functions 
by each element of the considered railway segment are shown in fig. 9.6. 
These conditions are necessary for the analysis of safety. The formula- 
tion of these conditions founded on the following factors: knowledge of 
the investigated system as the whole (fig. 9.1); definition of the seman- 
tic contents of fixed binary events (fig. 9.2), direct and inverse output 
functions of each element (fig. 9.3); usage of graphic tools of the func- 
tional integrity schemes (fig. 9.4), and base logical equations (9.1). The 
semantic contents of all the SFI fragments, shown in fig. 9.6, can be 
defined as follows. 




Figure 9.5. Generalized fragment and base logic equations. 
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1. The formed model does not take into account any concrete causes 
of appearance of the initial dangers yi and y 2 . Therefore, the sufficient 
conditions for realization of these output functions are only own binary 
events Xj and X 2 (the break of the rail, the presence of an obstacle on 
rails). Such SFI nodes are called prime nodes, since no arcs of functional 
maintenance comes to them. 

2. The necessary internal (own) condition of realization of the output 
function y^ (the signal of the red traffic light) is the failure-free operation 
of the indicator xs AND realization of the function yi of the rail fracture. 

3. The function y^ (turning on the brake system of the train) is 
realized by error-free action of the engine driver X 4 AND provided by 
at least one of two conditions: the red signal is lit (ys) OR there is an 
obstacle on rails (^2)- 

4. The train does not get to the dangerous segment of the railway 
(ys) if the brake system was timely switched on (2/4) AND the switched 
brake system functions {x^). 

5. For the well-directed safety analysis with the help of the fictitious 
nodes 6 and 7 in fig. 9.6, two groups of output functions are chosen. 
The function y^ ~ y-^ ■ y^ determines the total absence of the initial 
causes of appearance of the railway accident. The function y^j = yQ V 
y^ determines two possible variants of safe operation of the considered 
segment of the railway: yg is realized for the total absence of possible 
causes of the accident, OR 2/5 is realized for all possible variants of the 
correct (nominal) safety system operation in conditions of appearance of 
at least one initial cause of the accident. It in natural, that the inverse 
of safety conditions (y^) should correspond to all possible variants of 
events, which result in railway accident on the considered segment. 

Now it is necessary only to combine all the fragments, shown in 
fig. 9.6, and we shall obtain the complete scheme of the functional in- 
tegrity of the structural safety model of the considered segment of the 
railway. This SFI is shown in fig. 9,7. The corresponding system of 
logical equations for this SFI are: 



V2 = X2] 

ys = * 2 / 1 ; 

2/4 = 2:4 * (2/2 V ya); 
2/5 2:5 *2/4; 



2/1 = 2:1; 

2/2 = 2:2; 

2/3 Vyi; 

V 4 = ^4 v^2; 

7/5 =T5 V7/4; 
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ye = vi * 2 / 2 ; Ve^yi^ ?/ 2 ; 

?/7 = 2/6 V ys; yj^Ve^ye- (9-2) 

At the final stage of primary structural and logical modelling, the prob- 
abilistic parameters (P^, i = 1, 2, . . . , n) of elements are determined (in 
the example they are indicated in fig. 9.7) and the logical criteria of op- 
eration of the investigated system are fixed. In the considered example, 
the purpose of modelling is the probabilistic analysis of the safe opera- 
tion or the accident of the railway segment. The corresponding models 
can be obtained on the basis of SFI, shown in fig. 9.7, and any of the 
following two logical criteria of operation; 

1) the safety criteria 



Fc, = yy; (9.3) 

2) the criteria of the accident appearance 

Yc2 = V7- (9-4) 

All the considered forms of representation of input data of the automated 
structural-logical modelling are easily represented in a computer [65] and 
can be the basis for the full automation of all the subsequent stages of 
construction of computational models. 



Rail break 




Figure 9.7. Logical equations of model of safety of the railway segment. 
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9.6 Graphical-analytic method of determination 
of L-function of system efficiency 

At the stage of logical modelling , the logical function of system efficiency 
is determined, which should precisely correspond to SFI of the system 
and to the given logical criterion of its operation: 

Yc ^ Yc i = l,2,...,n). (9.5) 

The universal graphical-analytic method of determination of all the 
types of monotonic and non-monotonic logical function from any SFI 
(the system of logical equations) and from any logical criterion of opera- 
tion was designed for correct solution of the problem (9.5) by a computer. 
This method also takes into account groups of incompatible events and 
logical sequences of events [4,66]. The main contents of the universal 
graphical-analytic method is determined by the following principles. 

Logical function is determined with the help of the substitution 
method by consecutive deployment of all the output functions of the 
given L-criteria of operation following the functional integrity scheme of 
the system with the help of the base logical equations (9.1). The def- 
inition of function conjunctions is done by method of backward search 
in depth, realized in the form of construction of columns of the special 
decision-tree of the logical equations system, representing SFI of the 
system. For construction of the decision-tree the special symbolic appa- 
ratus is used. The structure and description of its symbols are shown 
in Table 9.1 and in fig. 9.8. Two decision-trees of the system of logical 
equations (SFI) by criterions (9.3) and (9.4) respectively are shown in 
fig. 9.9 and 9.10. 

The aggregative algorithm of the universal procedure of definition of 
logical FES includes the following steps: 

1. Processing L-criteria of operation. The next left conjunction 
of output functions is rewritten from L-criteria of operation to the 
next new column of the decision-tree, as a sequences of initial nodes 
(Table 9.1, item 1), and then the step 2 is done. If there are no more 
conjunctions in L-criteria of operation, then construction of the decision- 
tree is finished and the algorithm goes to the step 9. 

2. Formation of the maintenance function. In a column of the 
decision-tree, the first from below initial node is taken to deployment 
and is marked by circle or square (Table 9.1, items 2, 3). On branch 
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Figure 9.8. Types of units of the tree of decisions 



of the node, the function of maintenance is written. For the prime 
SFI nodes, the maintenance function is equal to I (logical one). For 
remaining nodes, the direct maintenance function include the right-hand 
sides of logical equations (fig. 9.7) of SFI without the simple variables 
Xi (fig. 9.9, al, a2, b3). For inverse output functions of functional 
nodes of SFI, chosen for deployment, the sign of own inverse is written 
rightmost in maintenance function (fig. 9.10, a4, a7). 

3. Processing of the maintenance function. All the maintenance 
function components are checked up on cyclicity, opening and logical 
contradictions by the rules, which correspond to the laws of the algebra 
of logic to the methods of taking into account groups of incompatible 
events and logical sequences. In checking, the cyclical and contradictory 
output functions in the maintenance function are replaced by the logic 
zero (fig. 9.10, a9, b9), and the open one are replaced by the logical 
unit (fig. 9.10, b9, c7, d6, e6, i7). Then, the maintenance function is 
converted under the rules of the algebra of logic. If maintenance function 
became equal to the logical zero (fig. 9.10, a9), then the formation of 
the column is finished (deadlock) and the algorithm gets to the step 8. 
If the maintenance function became equal to the logical unit, then the 
unit of the decision-tree which is being opened is considered as the open 
one (Table 9.1, items 4, 5) and the step 5 is further executed. In all 
other cases the algorithm proceeds to the step 4. 

4. Displacement of conjunction of maintenance function. The 

leftmost conjunction of output functions y^ is selected from maintenance 
function and rewritten at the end of the given column of the decision-tree 
as a sequences of initial nodes (in figs. 9.9 and 9.10 all displacement con- 
junctions are crossed by inclined arrows). The step 2 is further executed 
(main cycle). 
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5. Transformation of the column by the properly open node. 

All higher nodes of the column sequentially (bottom-up) are converted 
by the following rules. Properly open, open on guarantee and the dis- 
placed units (Table 9.1) are omitted. The accepted for deployments real 
and conditional nodes are considered as open on guarantee (Table 9.1, 
items 6, 7). If all higher part of the column is converted, then the for- 
mation of the logic function of conjunction is finished and the algorithm 
comes to the step 7. If during transformation an initial node was met, 
then the step 6 is further executed. 

6. Processing of an initial node. If the lower properly open column 
node corresponds to prime SFI node, then the initial node is crossed 
out with an angular arrow (Table 9.1, item 8) and is rewritten into the 
lower part of the formed column (fig. 9.9, a3). Then step 2 is executed. 
If the lower properly open node of the column is inverted and it does 
not correspond to a prime SFI node, then (if it is necessary to take into 
account the sequences) the direct maintenance function (fig. 9.10, c4, 
e3) for this node is formed and we further get to the step 3. 

7. Reading of conjunction. The next formed in the column conjunc- 




Figure 9.9. Tree of decisions for finding of logical function of safety. 
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tion of the required L-function contains logical variables; the numbers 
are indicated at real nodes (Table 9.1, items 4, 6). If these conjunctions 
are written from the column in the bottom-up, order then the actual 
sequence of events in them is saved. In figs. 9.9 and 9.10 the ordered 
L-function of conjunctions of safety and accident are written under each 
column (down directed arrows). The step 8 is further executed. 

8. Looking for branches. The units of the column are viewed se- 
quentially, bottom-up. Those units, which do not have the maintenance 
function, are removed and, respectively, the previous levels of deploy- 
ment of units of the higher part of the column are restored. If all the 
units are removed (branches are not found), the algorithm goes to the 
step 1. If the first branches from below is found ( marked by horizontal 
arrows in figs. 9.9 and 9.10), then the step 4 is run. 

9. Transformation of L-function. The minimizing transformations 
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Figure 9.10. Tree of decisions for logical function of accident. 
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Table 9.1. The node types of decision trees 



Number and name 
of node 


Description of node of decision tree of 
the logical equation system 


1. The initial node 


In the decision tree this node represents 

the integrated function, set in the formed column, 

but not accepted for opening 


2. The opening 
real node 


This node represents the integrated function Yi 
of the functional node i of SFI, accepted for 
opening, and means the realization of 
corresponding own binary event 


3. The opening 
conditional node 


This unit represents the integrated function 
Yi of the fictitious node i of SFI or the 
initial stage of opening of inverse output 
function of the functional node 


4. The opened 
real node 


This node represents either the prime functional 
node of SFI or the functional node, such that 
the ensuring condition has been realized in higher 
part of the formed column of the decision tree 


5. The opened 
condition node 


This unit represents either the prime fictitious 
node of SFI or the fictitious node, such that 
the ensuring condition has been realized in higher 
part of the formed column of the decision tree 


6. The opened 
on guarantee 
real node 


This node represents the functional node of SFI, 
such that the ensuring condition is realized in lower 
part of the formed column of the decision tree 


7. The opened 
on guarantee 
condition node 


This node represents the fictitious node of SFI, 
such that ensuring condition is realized in lower 
part of the formed column of the decision tree 


8. The displaced 
node 


This node represents the transfer of the initial 

node i to the lower position of the 

column of the decision tree for further opening 



of the obtained L-function and its reduction to the form, convenient 
for further application (for example, taking into account availability of 
groups of incompatible events, logical sequences, different initial system 
conditions, etc.) are done. 

The logical function of safety (fig. 9.8)and accident (fig. 9.9) obtained 
with the help of the graphical-analytic method are as follows: 



= V7 ^ Xi • X2 V Xi • X3 ' X4 ’ X5 V X2 ■ X4 • 



(9.6) 
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^C2 = Vj — Xl ■ Xs ■ X 2 V Xl ■ X3 ■ X4V X2 ■ X4,y X2 ■ X4 • X^V 

VXI-X3-X4-X5 (9.7) 

respectively. Once again we note, that the considered graphical-analytic 
method of the solution of systems of logical equations is strictly for- 
malized and analytically universal. First it allowed us to realize all the 
possibilities of the algebra of logic and to solve with the help of pro- 
gram complexes all, without exception, known problems of monotonic 
logical-probabilistic modelling, and also to build essentially new non- 
monotonic logical-probabilistic models of operation of complex objects 
and processes. Secondly, it is possible to overstep the bounds of the 
classic algebra of logic and to take into account two significant types of 
relations: groups of incompatible events and logical sequences of events 
in time. Then, in the obtained L-function (9.6), (9.7) all the possible 
combinations of initial dangers (events xi,X 2 ), and also minimum safe 
(9.6) and emergency (9.7) sequences of events of operation of system 
components of safety management of motion (x 3 ,X 4 ,X 5 ) are presented. 
These combinatorial sequences determine all (within the framework of 
adopted assumptions) variants of correct, i.e. safe operation of the sys- 
tem (9.6) and all variants of appearance of accidents, resulting in railway 
accidents. Taking into account sequences allows us not only to obtain 
computational probabilistic models, but also to formulate and to solve 
problems of the determine management of system safety. 



9.7 Combined method of construction 
of probabilistic polynomials 

At the stage of probabilistic modelling, the processes of construction of 
several types of computational models are automated. Here we will dwell 
only on original positions of the algorithmic method of construction 
of probabilistic function polynomials (P-function), which is called the 
combined method [4,66-68]. 

The given problem of P-function determination consists in transfor- 
mation of the logical function into the probabilistic function polynomial 
of the following type 



Yc = Yc{{xi, Xi}, f = 1, . . . , n) Pc{{Pi, Qi}, i = 1, . . . , n) (9.8) 
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For the correct solution of the problem (9.8) by the combined method, 
one uses, generally, two types of transformations of the initial logic func- 
tion Yc. At first quasi-orthogonalization on one logical variable is made, 
and then the symbol transition to the polynomial of the required P- 
function is executed. Under assumption of independence in aggregate of 
all elementary binary events XiJ = 1, 2 , . . . , n, the rules of fulfillment of 
these two stages are given below. 

9.7.1 Rules of quasi-orthogonalization on one variable 

All pairs non-orthogonal logic functions of conjunctions are checked up 
for the possibility of orthogonalization using the following rule 

'y ■ XiV ^ ■ (p ^ j ■ XiV j ■ (p ■ Xi (9.9) 

Here 7 and p are those parts of checked conjunctions, which do not 
include the variable Xi. The orthogonalizing transformation (9.1) does 
not increase the total number of conjunctions of the initial FSE. Exe- 
cuting the indicated transformations for the functions (9.6) and (9.7), 
we obtain : 



U;1 = V 7 ^ Xi • X 2 V Xi ■ X 3 ^ X 4 ■ X 5 V X 2 ■ X 4 ■ X^ ^ 

= Xi-X2yXi-X3-X4-X5'X2VX2-X4- X 5 ; ( 9 . 10 ) 

^c2 = ^7 = 2^1 • T3 ■ T2 V • 2:3 • X4 V X2 • ^4 V a;2 • 2^4 • ^ 5 V 
V Xl • 2:3 • 2 J 4 • T5 = • T3 ' T2 V 2:1 ■ 2:3 • T4 ‘ T2V 

V 2:2 • ^4 V 2:2 • 2:4 • ^5 V 2;i • 2:3 • X4 ■ T5 • X2- ( 9 . 11 ) 



9.7.2 Rules of symbol transition to the probabilistic 
polynomial 

Here the logical function is considered as the rigorous analytic form of 
determination of that composite random event, the probability of which 
should be correctly calculated with the help of the required P~function. 
In the stated sense, the conjunction is a product, the disjunction is a 
sum, and the inverse is the complement of simple random events, prob- 
abilistic parameters of which are known. Therefore, for obtaining the 
P-function polynomial it is sufficient to make symbol transformations of 
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notations of logical variables and operations to notations of probabilistic 
variables and arithmetic operations, using the precise conformity with 
the laws of the probability theory. The full set of such rules of symbol 
transition from L-function to P-function is given below. 

1. Transformation of simple logic variables. In the initial logic func- 
tion, all single logic variables x are substituted by notations of corre- 
sponding probabilistic parameters: 

Xi ^ Pi 

Xi-^Pi (9.12) 

2. Transformation of conjunctions. The rules of transformation of 
conjunctions in combined P-function are determined by the following 
formula: 

Pj if Xj = Xk] Xj ^ Xk 

Pj n Pk 0 if Xj = Xk] X ^ Xk GIE (9.13) 

Pj * Pk if Xj ^ Xk 

Here the first rule intends for refraining from repetition, if they there are 
in logic products. The second rule uses for variables, which belong to 
one GIE. The third rule uses, if multiplied events are different in totality. 

3. Transformation of disjunctions. The rules of transformations of 
disjunctions are the following: 

Pj if Xj — Xj — Xk 

Pj U Pk 1 if Xj = Xk] Xj 7^ Xk GIE (9.14) 

Pj P Pk - Pj * Pk if Xj 7^ Xk 

Here the first rule intends for refraining from repetition, if they there 
are in logic sums. The second rule uses for variables, which belong to 
one GIE. The third rule uses, if add different and independent events in 
totality. 

4- Transformation of inversions. All inversions in combined P- 
function determine events opposite to given ones: 

Pi-^ Pi 

1 - ^3 



( 9 . 15 ) 
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Providing the total orthogonality L-function, the symbol transforma- 
tions precisely coincide with the known rules of the direct replacement. 
Converting L-functions (9.3) and (9.4) into P-function polynomials, we 
obtain probability of safety 



^Ci = = Q1Q2 + -PlP3^4AQ2 + ^ 2 ^ 4 ^ 5 , (9.16) 

probability of emergency: 

^2 ~ ^{y?} ” -^1 Q3Q2 + P*iPhQ 4<52 + ^^ 2^4 + P2P4Q5+ 

+ P 1 P 3 P 4 Q 5 Q 2 (9.17) 

With the help of methods for taking into account groups of incom- 
patible events, the possibility of using in models of reliability, safety 
and risk of systems of elements with any number of proper conditions 
and stochastic dependence is realized. At this some laws of the algebra 
of logic and rules of construction of probabilistic function polynomials 
change [4,66-68]. 

9.8 Calculation of standard probabilistic char- 
acteristics of systems 

The automatically formed P-function polynomials in themselves are al- 
gorithms of calculation of the general system probabilistic characteristics 
of the system. Then, substituting into (9.16) and (9.17) values of prob- 
abilistic parameters of elements (fig. 9.7), we obtain 
probability of safety of the segment railway 



Pci = P{y 7 } = 0.99064, (9.18) 

probability of emergency on the segment railway 

Pc2 = Ply?} ^ 0.00936. (9.19) 

For development and substantiation of various management solu- 
tions, of big importance is the objective grading of that role, which is 
played by different elements in maintenance of the general system pa- 
rameter of reliability, safety or risk of the system operation. The param- 
eters of significance and contribution of separate elements are applied 
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Figure 9.11. The results of calculation of magnitudes and contributions of elements 



for these purposes [2,4]. These parameters determine the change of the 
general system characteristic Pc when values of separate parameters of 
elements Pi very. The outcomes of calculations of element parameters 
role of the considered example are given in fig. 9. 11 

For last years certain scientific and practical experience of develop- 
ment and application of the theory, technology and program complex for 
the automated structural and logical modelling and calculation of reli- 
ability, safety and risk parameters of systems of different types, classes 
and destination has been accumulated. The realization of all abilities of 
the main modelling tool of the algebra of logic made it possible to auto- 
mate the construction processes not only for all models, represented by 
event trees, failures and graphs, but also formulate and solve many es- 
sentially new and actual problems of the structure analysis of reliability, 
safety and risk of complex systems. 

On the basis of further development of the considered algorithmic 
methods, it is possible to automate construction processes of some new 
classes of mathematical system models: statistical, Markov’s and net- 
work ones. In formed models of dependent events, the possibility to 
take into account availability in the system of elements with any num- 
ber of conditions and different sequences of random events in the time 
is realized. Tens of researches are made with usage of the ASLM the- 
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ory and technology. For example, the successful calculations of reliabil- 
ity and failure-resistance of the automated management system of the 
technological process at the stage of design were made. Development 
of the commercial Software has started. In the program complex it is 
planned to realize the latest progress in ASLM technology. The basic 
ASLM characteristics can be better then those of the known program 
system Risk Spectrum of the company Relcon AB for the automated 
modelling and calculation of reliability and safety, working in “trees of 
failures” technology. 




Chapter 10 



FOUNDATIONS OF THE RISK LP-THEORY 
WITH GROUPS OF INCOMPATIBLE EVENTS 



We start to consider the logic and probabilistic (LP) risk LP-theory for 
systems with groups of incompatible events (GIE); elements and output 
characteristics of these systems have some levels of values. Examples 
of such systems are: credits in banks, security portfolio, diagnosing and 
monitoring, estimation of quality of company work, accuracy of produc- 
tion, etc., in which the risk is the usual and mass phenomenon and there 
are the sufficient statistical data on risk objects [7-9]. 

We name this research direction “Risk Analysis and Optimization 
in systems with groups of incompatible events” or “Reliability Analysis 
and Optimization of Multi-state Systems” [73,74]. The risk LP-theory 
with GIE includes: construction of a risk model, identification of the 
risk model on basis of statistical data and risk analysis. In its turn, 
construction of the risk model includes construction of a structural risk 
model, a logical risk model and a probabilistic risk polynomial. We con- 
sider homogeneous objects of risk (for example, credits) or conditions 
of the system at different instants of time (for example, security portfo- 
lio). Risk LP-models can be any logical complexity but in business risk 
LP-models are usually not complex. 

We shall consider three various risk LP-problems: classification, in- 
vestigation and effectiveness, which have differences statement of the 
problems and offered criteria of optimization. More often the structural 
risk model is the associative risk LP-model, constructed with applica- 
tion of common sense to connection of events. For example, formulation 
of the credit risk scenario is as follows: non-success occurs, if any one, 
any two,. . . or all sign-events occur. 
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Structural risk models have corresponding L-functions of various 
complexity with connections AND, OR, NOT, cycles and repeated 
elements. Any L-function after orthogonalization can be written in 
form of a probabilistic polynomial or a probabilistic model (P-model, 
P-function). Then we can calculate the risk of the object, if we know 
the probabilities of grade-events. The considered approach allows us 
to construct the well-organized risk P-polynomial. As examples show, 
the accuracy of the risk LP-model is almost two times higher and the 
robustness is almost seven times more than those of methods based on 
the discriminant analysis and the neuron networks. 

As the basic method for solving problem of risk, since we do not wish 
to idealize and simplify solutions of actual problems, the algorithmic 
method is chosen. 

10.1 Tabular representation of statistical data 

The statistical data for risk analysis and evaluation are given in table 
form (Table 10.1). Table rows represent objects or states of the object 
i = 1, 2, . . . , A". Table columns correspond to the object parameters or 
states of the object Z\, . . . , Zj, . . . , Zn- The parameters, in their turn, 
can have grades Zjr^r ~ 1,2, ..., Nj . The grades are in cells of the 
table. The last column contains the parameter of object effectiveness 
Y. The values of grades are considered as random variables or grade- 
events, which distribution is set by a discrete series, that is by values of 
grades and their probabilities. Object could be a product, which can lose 
quality during production and maintenance, or a credit, which can be not 
returned or security portfolio yield. For measurement of parameters or 
characteristic of the object scales (logical, qualitative, linear, numerical 
and others) are used. 

Generally, the grades are not ordered linearly and one cannot say, 
that the grade 3 is worse or better than the grade 4 for the final event. 
The final event also has grades. For example, the set of possible condi- 
tions of a technical system can be divided into the following conditions 
(grades, subclasses): 1, if the system is functioning and serviceable; 2, if 
the system is faulty but serviceable; 3, if the system is not serviceable, 
but it can be restored; 4, if the system is serviceable but its operation 
is inexpedient because of large operational expenses. For the credit we 
have the following grades: 1, if the credit is returned; 0, if the credit is 
not returned. 
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Table 10.1. Table “Objects and parameters” 



Objects 

i 


Parameter 

Zi 


Parameter 

Z2 


Parameter 

Z, 


Parameter 

Zn 


Parameter 

effectiveness 

Y 


1 






























Zjr 


1 












. . . 


. . , 


N 













To parameters and grades there correspond random events, which 
result in failure [7-9], and logical variables with the same symbols of 
identifiers. Parameter-events (their number is equal to n) are connected 
logically by operations OR, AND, NOT. The grade-events for each 
parameter form GIE. 

The maximum number of combinations (different objects or states) 
is as follows: 



f^max — N\ • N2 • • Nj • ’ Nji, (10.1) 

where Ni, N2, . . . , Nj, . . . Nn are numbers of grades in parameters. 



10.2 Grade-events distribution in GIE 

Representative table “Objects and parameters” can hold statistical data 
with any distribution function and arbitrary connections between parameter- 
events. The frequencies (probabilities) of grades are calculated from the 
table by the expression; 

W^f = Njr/N, j = l,2,...,n; r = 1, 2, . . . , Nj, (10.2) 

where Njr is the number of objects (states) in the table for the parameter 
j with the grade r. 

The probabilities of some grades in the table according to (10.2) are 
equal to 0, if these grades are not presented in the table 10.1. 

From (10.1) and (10.2) it follows too that it is desirable to have in 
table 10.1 as many statistical data as possible and to define more exactly 
values of probabilities of grade-events Fjr as we get new information on 
objects or their conditions. 

The researches of actual “tables” confirm validity of passage to dis- 
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Crete non-parametric probability distributions, connected with grade- 
events. For example, each of 1000 credits was described by 20 param- 
eters and each parameter had from 2 to 11 grades. As a result of the 
analysis the simplified empirical discrete distributions of frequencies of 
grade-events were as follows: uniform, on a straight line, sloping up or 
down; in a triangle turned up or down; symmetric, displaced to the left 
or to the right. Prom such variety of the forms of distributions it is 
necessary to set distributions of grade-events in GIE by probabilities 
(fig. 10.1). 

The risk in real systems depends on many parameters. For example, 
the investment portfolio can have tens of securities with different yield 
and risk values. More often different parameters have different dimen- 
sion, distribution laws of parameters are different and are not normal. 

Usually multidimensional normal distributions are applied. That 
is, each single parameter is distributed normally and its mean value 
and dispersion are known. The dispersing matrix of all parameters is 
considered to be known. Any means for calculation of risk in realistic 
multidimensional systems, which influencing parameters have different 
non-normal distribution laws, are absent. The LP-theory of risk with 
GIE offers a solution to this problem on the basis of LP-calculus. 

In the LP-theory of risk with GIE a transition from continues dis- 
tribution of a random variable to a discrete distribution is used. The 
range of values of the continuous random variable is split into intervals, 
not necessarily having identical length (fig. 10.2, a). 

The probability of random variable Zj to belong to a given interval 
is determined by statistical data (fig. 10, b). Naturally, the sum of 



dPjr/dZj 







Intervals 
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Zj end 



Figure 10.1. Continuous parametrical (a) and discrete non-parametrical 

(b) distributions 
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probabilities over all intervals for one parameter is equal to 1. Numbers 
of intervals are equal to the numbers of grades. Suppose that such 
transition for the LP-model of risk with the GIE, which has several 
parameter-events connected by logical connections AND, OR, NOT, is 
done. Then calculation of final event probability is fulfilled by the rules 
of LP-calculus. 

10.3 Logical rules of probabilities calculation 
in GIE 

For every GIE the following logical equations hold [68] : 

ZjTT A Zj}^ — 0; 

Zjr V Zj},^ — 1; 

Zjr A Zjiz — Zjf^', 

Zjr V Zji^ — Zji^ (10.3) 

along with the rules for substitution of incompatible events by their 
probabilities: 



P\^Zjr A Zjf^y — 0, 

P{zjr V Zjk} — P{Zjr) + P{Zjj^)] 

P{zjrVZjk} = 1; 

P{zjr A Zjk} = 1 - {P(Zjr) + P{Zjk)}- (10.4) 

The expressions (10.3) and (10.4) are not convenient for calculations 
because of unhandiness of character transformations in the case when 
there are some GIE with a great number of grade-events. Since we would 
not like to idealize and simplify solutions of real problems, as the basic 
method for solving problems of risk we choose the algorithmic approach. 
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10.4 Orthogonality of L-functions 

for different objects of the table 



We write the logical function for possible objects or states of the table 
(table 10.1) in the perfect disjunctive normal form (PDNF) [2,9]: 

y = Yi V I 2 V . . . V Fi V . . . V Yat, (10.5) 

where each object or state is determined by the logical function including 
all logical variables: 



y^ = Zi A . . . A . . . A . , . A Fn- (10.6) 

In engineering each logic variable j accepts only two values, Zj and Zj. 
Thus, the logic function (10.6) determines N — conditions of the 
object. The logic functions of any two conditions, for example 

Fi = Zl A . . . A Zj A . . . A Zn; 

Yi+i - Zi A . . . A Zj- A . . . A Z^ (10.7) 

are orthogonal in view of the following identity for the logical product 

y A y+i = 0, (10.8) 



which holds because Zj A Zj = 0. 

Therefore, PDNF (10.5) is orthogonal, because it can be written 
as the logic sum of all — 1,2, ...,A^, where any two logic items 
(conjunctions) are orthogonal. 

In business, at description of objects or conditions of objects (Ta- 
ble 10.1), each logic variable in (10.6) accepts many values, equal to 
the number of grades or intervals on which the yield is split. The logic 
functions for two different conditions of the portfolio, for example 

y = Z\ A ... A Zjf A ... A Zfi'f y.|-i = Z| a ... a Zj A ... A Zji 

(10,9) 



are orthogonal too (10.8), because 



Zjf A Z jj>j^\ — 0 



(10.10) 
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because Zjr and Zjr+i belong to the same GIE. The property of or- 
thogonality of logical items of the risk L-function (10.5) allows us to 
proceed from logical functions to algebraic expressions. 



10.5 Dependent parameter-events 

Let the parameter-events Zi, . . . , 2’j, . . . , are dependent. The estima- 
tion of dependency or independency of parameters in statistical data is 
carried out through their grades in the following way. The frequency of 
grade-events in statistical data of the table is determined by expression 
(10.2). At the same time, for the complete set of combinations (10.1) it 
is equal 



( 10 . 11 ) 

In other words, all parameter-grades in the complete set of different 
objects have identical frequencies, and distribution of grade probabilities 
is uniform. Therefore, some combinations are found more frequently and 
it generates real arbitrary non-normal distribution lows of grade-events, 
including normal ones too. 

The measure of dependency of parameters and their grades is esti- 
mated by the difference of relative frequencies of grades in statistical 
data and in combinatorics 

djr = wy - (10.12) 

and also by the mean Wjm, minimal Wjmin and maximal Wjmax values 
in GIE. Characteristics (Wjm — ^jmin and Wjmax — Wjm) determine the 
skewness of distribution. 

10.6 Independent parameter- events 

If parameter-events Zi, . . . , , . . . , are independent and given by 

their grade-events with arbitrary discrete distribution laws (it may hap- 
pen that some of them are constructed on basis of normal distribu- 
tion laws), then we have the right to consider all the variety of objects 
( 10 . 1 ), 
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The probability for arbitrary object i or condition of the object by 
(10.6) is equal : 

P{Yi} = Fi., • P2r2 • Pnrr., (10-13) 

where the index rj for each parameter j is equal to one of the values 

1 , 2 ,. 

Based upon the orthogonal logical function (10.5), the following con- 
dition is fulfilled: 



N 

^P, = l. (10.14) 

i=l 

Starting from the expression (10.1) for the number of possible objects 
(conditions) and from the expression (10.13) for calculation of the prob- 
ability for the object, we conclude that computing complexity of algo- 
rithm is exponential: 



Nc^a^, (10.15) 

where n is the value of the determining factor of the problem; a is 
a constant. For example, for algorithms of the risk LP-theory of the 
security portfolio, the parameters are the following; n is the number 
of securities in the portfolio, a is the number of intervals on which the 
security yield is split. 

However, the computing complexity should not shock the reader. 
Though values of the parameters a and n are rather great (n = 10 -i- 100 
and a = 30 -r 100), the engineering approach lets reduce the complexity 
drastically. Under the approach the problem does not need the complete 
evaluation of all possible conditions of the portfolio, which is replaced by 
construction of the total distribution of the portfolio yield. It is known 
that 13 points of statistical data are sufficient to restore distribution. 
Therefore, if the number of such points are 1 300, or 13 000, or 130 000, 
then it is quite enough. Modern computer proceed with some millions 
of operations per second, so the above mentioned calculations can be 
carried out quickly and in a real time scale. 

We can remind the same situation exists in the theory of the optimal 
planning of the multiple-factor experiments, where the experiments are 
conducted with variables on the unit sphere at points where it meets 
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orthogonal axes. Therefore, not all experiments are fulfilled, but only a 
limited number of experiments, corresponding to fractional replicas. 



10.7 Risk parameters Yad^ Risk^ Nad 

Calculation of admitted value of the output parameter Yad at a given 
value of risk Risk is the complex algorithmic problem. We consider 
three different methods for its solution. 

1. Method of interpolation. Let us now construct the differential 
discrete distribution of the output parameter Y. For this purpose, we 
split all range of changing of the output parameter into intervals (grades) 
r = 1,2, . , . ,iVp. We carry out summation of the probabilities Py. of 
values of the parameter on the chosen intervals: 

^ 'y V ^Vi'> ^ = 1} 2, . , . , A^p, (10.16) 

YiC{Yr-i;Yr) 

and also construct the integrated discrete distribution for the output 
parameter: 



Fyr — Pyr > — 1) 2, . . . , Ap. (10.17) 

1 

Now we can calculate the admitted value Yad for the given risk Risk, by 
using the formula for linear interpolation (fig. 10,2): 

{Risk - Ai)/{Bi - Ai) = (Tad - A)/{B - A); 

(l"ad - A) - {Risk -A)-{B- A)/{Bi - yli); 

Rad — AF {Risk - Ai) • {B - A)/{Bi - ^i), (10.18) 

2. The method of sorting. The simple and accurate algorithm of 
calculation of the admitted value of the output parameter Yad is the 
method of sorting. Really, arrays of values of the parameter F) and 
their probabilities Py., z = 1, 2, . . . , 77, can be sorted by the value of the 
output parameter Y{ in the ascending order. Then, for the sorted arrays 
we should sum up the probabilities Py. of values of the parameter Yi 
until we get the given Risk. The last term in the sum from the array of 
probabilities will correspond the value of the output parameter, which 
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Figure 10.2. Calculation of the admitted value of the output parameter Yad at the 
given risk value Risk by the interpolation method 



should be taken as the admitted value Yad- Complexity of the process of 
sorting depends on the number N of conditions of the output parameter 
and in practice the time of repeated fulfilment of sorting in the process 
of optimization is quite acceptable. 

3. The method of half division. The method of half division consist 
in the fact that the interval [Ymin^ Tmax] is consecutive divided into two 
equal parts [T^m 5 ^i/ 2 ] \Xii 2 ^ymax]- Foi" each parts are counted by 
summation of probabilities Pi — P{Y < 1 ^ 1 / 2 } , P 2 = P{Y > ^ 1 / 2 } 
and the number of objects or conditions in parts. The part, in which 
there is the risk Risk, is divided again half-and-half. This procedure 
proceeds so long as the number of conditions in the part will equal to 
1 (one object). At N — 1000 objects, the search Yad by the method of 
half division occupies in three times less time for calculation, than by 
using of the method of sorting. 

The parameter Nad- The parameter Nad is the number of con- 
ditions of the output parameter Yad in “the tail” of the contribution, 
that is at condition Yi < Yad- This is a very important characteristic 
of the risk, because it is the integer number and can be calculated with 
accuracy until 1. As we shall see later, it is possible to solve the opti- 
mization problem, for example, of the security portfolio risk, by using 
not the object function Yad-> but the equivalent function N ad- 
it is to note here that the risk LP-theory can be stated as the theory 
of integer numbers with arithmetical operations of addition and divi- 
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sion of integer numbers. The expressions for calculation of probabilities 
(10.2) of grade-events and calculation of the object risk (10.13), which 
are given above, confirm this idea. Hereinafter we shall show that the 
risk LP-theory with GIE also uses the results of the Weil’s theorem on 
division of integer numbers and Bayes’s formula on conditional proba- 
bilities. Below, at the description in details of risk LP-models with GIE 
in various problems and object fields we shall use more than once the 
arithmetical operations with the integer numbers. 

And it will be right to back to basics, logic and arithmetic, to solve 
complex problems. 

This situation is not surprising, because arithmetics has already 
taken the worthy place in digital communication and digital photo- 
equipment. Computers also are based on use of logic and arithmetics 
(binary). 

10.8 Optimization problems 

Elemental and obligatory part of the risk LP-theory with GIE is solu- 
tion of optimization problems on a set of objects or or conditions of an 
object (table 10.1). The optimization problems are formulated in dif- 
ferent ways for problems of classification, investment and effectiveness 
and have different object functions. The basic characteristics of these 
problems are as follows: 

1. Non-linear optimization problems with a great number of estimated 
parameters (up to 100 and more); 

2. The object function can be integer, but the estimated parameters are 
real numbers, determined with precision 7-8 signs after the decimal 
point; 

3. The estimated parameters are restricted by condition of connected- 
ness in the form of equality of their sum to 1; 

4. It is necessary to estimate the accuracy of solution of the optimization 
problem and estimated parameters; 

5. Optimization problems are solved by algorithmic iterative methods 
by computers; 

6. The time solution of some optimization problems, for example, clas- 
sification one, may take up to several hours when using a modern 
computer. 
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Detailed statements and solutions of optimization problems in the 
risk LP-theory with GIE are considered for problems of classification, 
investment and effectiveness in the following chapters. 



10.9 Analysis of risk 

We shall carry out risk analysis after solution of the optimization prob- 
lem based on calculation of contributions of grade-events [94-96,99,100]. 
Contributions of grade-events into the admitted value of the output pa- 
rameter Yad are equal to 

Djr = Njr/Nad, j = 1, 2, . . . , n; r = 1,2, (10.19) 

where Nad ^jr are the numbers of all conditions of the output 
parameter and conditions of the output parameter with the grade r of 
the parameter j, such that the conditions satisfy the inequality 

< Yad. (10.20) 

Contributions of grade-events to Risk are equal to: 

Cjr ~ Pjr/Risk, j = l,2, ...,n; r = 1, 2, . . . , A(^-, (10,21) 

where Pjr is the total probability of conditions of the output parameter 
with the grade-event r of the parameter j, satisfying (10.20). 

On the basis of the given above expressions, contributions of the 
group of grades-events for one or a few different securities [2,7,59] can be 
calculated. Grades or their groups, having the maximum contributions, 
are the best indicators, showing the opportunity of non-success for the 
output parameter. 

10.10 Generation of an arbitrary distribution 

For improvement of techniques of logic and probabilistic estimation and 
analysis of risk and for purposes of training of the risk LP”— theory it 
is necessary to generate event” ^grades of signs with arbitrary discrete 
distribution; for example, event” = grades of signs of credits, yields of 
shares, values of influencing parameters and parameter of efficiency. 

We shall obtain an arbitrary discrete distribution by addition of a 
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few elementary distributions, generated by different laws. As elementary 
distributions law we use, for example, the normal law, uniform law, law 
of a trapeze, law of slope line, WeibuU’s law, etc. 

The technology of obtaining of an arbitrary discrete distribution is 
as follows: 

1) With a chosen elementary law of distribution of parameter Z in 
a random way we generate N values of parameter in the interval of its 
change {Zmin^ ^max}] 

2) The obtained values of the parameter we break into a chosen 
number Nj of grades; 

3) For the grades by formula (10.2) we calculate frequency-probabil- 
ities; 

4) The operations 1)~3) should be repeated for generation of chosen 
elementary distributions, each of which should also have Nj grades; 

5) We combine the obtained different elementary distributions by 
formula: 



Pj — x\ • P\j -f X 2 • P 2 j + . . ■ + X)^ ' ^kji j — 1? 2, ... , Nj^ (10.22) 

where X\,X 2 ^ ■ • ■ , Xk are weights of elementary distributions; their sum 
is equal to 1; 

Pj is the probability of the grade j of resulting distribution of the 
parameter; 

Pij, P 2 j, ■ • ■ , Pkj are probabilities of grades j of elementary distribu- 
tions 1, 2, . . . , /c. 

10.11 Dynamic risk LP-models 

Probabilities of initiating events in the risk LP-model change in time. 
That is, it is possible to set them as functions of continuous or discrete 
time: Pjr — Pjr{t), j = 1, 2, . . . , n; r = 1,2, Nj. It is typical for 
complex technical systems — probabilities of element failures change 
because of deterioration, corrosion, aging, repair, replacement of com- 
ponents, training of personnel etc. 

In many branches of engineering (nuclear, rocket etc.) the functions 
of change of probabilities Pjr — Pjr{t) are constructed practically for 
all initiating elements as functions of the time and the determining size 
or characteristic varied in time. For example, in the starting rocket 
complexes the thickness of pipes, which are used for transmission of the 
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acid or the fuel, decreases as a result of corrosion. The pipe thickness is 
measured at monitoring, and the probability of the pipe destruction is 
calculated by known equations for the given loading. 

Actually as a result of monitoring of the technical condition of the 
operating CS, we get the information on its actual condition, estimate 
the risk of its operation and accept the appropriate decisions. Especially 
it is important for the numerical estimation of the non-success risk of 
CS with the prolonged service life. 

In the course of time, the probabilities of elementary events, initiat- 
ing failures or accidents, change in all other complex systems: economi- 
cal, medical, social etc. Therefore monitoring in these systems should be 
regular periodic and take decisions of possibility of the safe exploitation 
and capital investment in safety. 



10.12 Problem areas of usage 

of the risk LP-theory with GIE 

The LP-method [1,2] is applied to estimate the risk in complex techni- 
cal systems. It is based on the logic representation of development of 
dangerous conditions and mathematical methods of calculation of the 
truth functions of logic algebra. The risk structural model represents 
the graph; its nodes are connected by connection of types AND, OR, 
NOT. Each graph node can accept value 1 or 0. Some nodes of the 
graph are random events with known probabilities (initiating events), 
other nodes are derivative events. The probabilities of initiating events 
are known. The probabilities of derivative events are to be calculated. 

The risk logic function (L-function) is composed according to the 
graph, by finding risk shortest ways, or with the help of the minimal 
cross-sections of risk prevention. We obtain the risk P-function after 
orthogonalisation of the risk L-function. The risk computation is made 
on the risk P-polynomial by substituting suitable probabilities of the 
initiating events. 

The LP-method allows us to estimate numerically the object risk 
and to analyze contributions of initiating events to the object risk [1,2]. 
However, direct application of the LP-method is impossible for esti- 
mation of the non-success risk in banks, business, and quality of pro- 
duction. In development of the LP-method of reliability and safety by 
I.Ryabinin [1,2,59], we introduce new concepts and risk problems [7-9]: 
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1. We consider a set of homogeneous risk objects or conditions of one 
object in different instants of time; 

2. Initiating and final events are considered on many levels; 

3. Associative risk LP-models constructed with the help of common 
sense for events connection are considered too; 

4. Problems of parametrical and structural identification of risk LP- 
models from the statistical data are solved; 

5. New problems of the risk analysis on the basis of calculation of con- 
tributions of initiating events into the mean risk of an object set and 
into the accuracy of the risk LP-model are solved. 

Let us discuss in more detail the groups of incompatible events (GIE) 
considered in point 3. A.S. Mojaev suggests to link the groups of incom- 
patible events with rows of table 10.1. For this purpose the algebra of 
GIE is used, which was specially developed by him and which is repre- 
sented by expressions (10.3) and (10.4). The GIE’s by A.S. Mojaev ap- 
pear in risk problems to denote special dependence between parameter- 
events (incompatible events). 

We additionally introduce another type of GIE, namely, GIE for 
grade-events for each parameter-event (columns in table 10.1). The in- 
troduction of such GIE’s, for which expressions (10.3) and (10.4) are also 
valid, allow us to formulate problems of LP-modelling and LP-analysis 
of risk in the fields of classification, investment and effectiveness. Earlier 
in the fields only the normal laws for distributions of random variables 
were considered, and now we have the opportunity to use discrete distri- 
butions constructed for arbitrary law of distribution, or, more precisely, 
on statistical data. 

Below the risk LP-theory with GIE is considered in details for the 
following three problems with different statements, methods of calcula- 
tion of the admitted value of the output parameter Yad, risk Risk and 
optimization criteria: 

1. Risk in problems of classification (credit risks, ratings of banks, etc.); 

2. Risk in problems of investment (security portfolio); 

3. Risk in problems of effectiveness (quality, accuracy). 

Statistical information in these problems are equally well given, namely, 
by table 10.1 except for the last column of the output parameter Y. 
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In the risk classification problem, the output parameter Y in the 
last column of table 10.1 is given and has two or more grades. It is 
necessary to construct the risk LP-model, i.e. to determine probabilities 
of grade-events, which would classify new objects with the least error. 
The admitted risk Pad or several admitted risks Padi , Pad 2 , • • • , Pand are 
also to be determined; the risks are the thresholds for division of objects 
into classes by the value of the risk. 

In the risk investment problem, the output parameter Ry is the yield 
of portfolio in the last column of table 10.1. The optimum relative shares 
of securities in the portfolio are calculated from the condition that the 
maximum of the minimal admitted yield of portfolio Rad at the given 
Risk has the yield smaller than the admitted yield Rad- 

In the risk effectiveness problem, the output parameter Y or its 
grades in the last column of table 10.1 are given. It is necessary to 
determine weights of the influence of parameter-events, placed in other 
columns of the table, to the distribution of risk of the output parameter, 
having the admitted value Yad- 

The special questions of the risk LP-theory with GIE, including the 
statements and solutions of optimization problems, are considered in 
details for the above mentioned problems of classification, investment 
and effectiveness in chapters 11, 16 and 18, respectively. 

Thus, the problems of development of the risk LP-theories with GIE 
in the fields of classification, investment and effectiveness include the 
following subjects and tasks: 

• Tabular representation of the statistical data; 

• Construction of scenario and structure risk models; 

• Definition of parameter-events and grade-events; 

• Definition of groups of incompatible events (GIE); 

• Quantization of distributions of random grade-events; 

• Generation of arbitrary discrete distributions; 

• Construction of the logic risk model; 

• Orthogonalization of the logic risk model; 

• Construction of the probabilistic risk model; 

• Optimization (identification) of the LP-risk model; 

• Determination of connection of risk parameters Yad-, Ri-^k, Nad'-, 
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• Analysis of risk by contributions of grade-events into Yad, Risk, N^d- 

The risk LP-theory and corresponding Software are tools of the new 
generation for modelling, analysis and management of risk and have the 
following advantages; 

• Almost two times higher accuracy in classification than other well- 
known models of risks; 

• Almost seven times higher robustness (stability) in classification than 
other well-known models of risks; 

• A big number of new tasks of analysis and management of risks can 
be solved (12 instead 2); 

• Transparency of the risk model and results of estimation and analysis 
of risk. 




Chapter 11 



THE RISK LP-THEORY WITH GIE 
IN THE CLASSIFICATION PROBLEM 



The risk LP-theory with GIE in the classification problem will be con- 
sider, for the most part, by the example of classification of credits into 
“good” and “bad”. The considered approach allows us to construct a 
well-organized risk P-polynomial. As examples show, the accuracy of the 
risk LP-model is almost two times higher and robustness is almost seven 
times more, than those of methods based on the discriminant analysis 
and the neuron networks. 

11.1 Methods of classification of credits 

There are numerous papers and books about various methods of clas- 
sification, risk measurement and econometrics [70-72], etc., based on 
the linear and quadratic discriminant analysis, the cluster analysis, the 
neuron networks, the theory of multidimensional normal distributions. 

Classification of risk objects by methods of rates and recog- 
nitions. In the rating-based methods the factors, taken into account, 
are the business risk (external environment, management quality, nature 
of mutual relation with clients, characteristics of credits, etc.) and the 
financial risk (factors of the company financial condition) [7] . Then the 
risk rating system is used, which is the system of estimations of factors. 
By the value of the total parameter, the credit can be referred to one of 
two subclasses: bad or good objects (though, it is not clear how bad or 
good it is. The methods do not allow to find exact numerical estimate 
of the risk, to establish the admitted risk, to determine the price for risk 
and to reveal parts of the system resulting in most failures. 
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In the methods, based on use of mathematical classification methods, 
estimation of the credit risk is carried out using a set of data on the client 
and the credit. These data include 20-1-38 fields. A number of grades for 
each field is equal to 2 -f- 11. The separating surface attributes the credit 
to one of two subclasses: the good or bad credits. Here the answer is 
not given too, how good or bad the credit is. The quality of an object 
classification method is characterized by several parameters. If a class 
has only two subclasses, for example, good and bad objects, then such 
parameters are errors Eg, E^ in classification of good and bad objects 
and the average error Em in classification of objects. 

Classification of risk objects with use of the neuron net- 
works. In the classification methods based on the neuron networks 
(NN), the “objects and signs” table is used too. The NN is built by 
introducing an entrance layer of nodes, internal hidden layers of nodes 
and a final node. In the entrance layer the number of nodes is equal 
to the number of signs in the object. The grades of signs come to each 
node from the recognized object. For the given structure the training of 
NN consists in a choice of such weights of its edges, that the maximal 
number of objects should be classified correctly [7]. 

For any object i weights of edges, which get to the final node are 
summed up, and the weight Ci is calculated. In the final node a stepped 
transfer function with the threshold Cad is used for object classification 
to good and bad ones. The values Cj,...,Cjv and Cad are not con- 
strained any way. There are Nh bad {Ng good) objects to the right (left) 
of the threshold Cad. So, each object is at known distance from Cad and 
the objects can be compared by these distances. 

If in NN-methods we also want to solve the problem of estimation 
of probability of non-success, it is necessary to introduce very rigid re- 
quirements to NN as shown below. These requirements actually mean, 
that NN should work in the probabilistic space with the logic, instead 
of arithmetic, addition of events (weights of edges). 

Logic and probabilistic estimation and risk analysis in engi- 
neering. The LP-method [1,2] is applied to estimate the risk in complex 
technical systems. It is based on the logic representation of development 
of dangerous conditions and mathematical methods of calculation of the 
truth functions of logic algebra. The fundamental concept of the LP- 
theory is the concept of the dangerous condition and the system danger 
appropriate function. The risk structural model (scenario) is written. It 
represents the graph, which nodes are connected by connection of types 
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AND, OR, NOT. Each graph node can accept value 1 or 0. Some 
nodes of the graph are random events with known probabilities (initi- 
ating events), other nodes are derivative events. The probabilities of 
initiating events are known. The probabilities of derivative events are 
calculated. 

The risk logic function (L-function) is made according to the graph 
with the help of the risk shortest ways, or with the help of the minimal 
cross-sections of risk prevention. We obtain the risk P-function after 
orthogonalisation of the risk L-function. The risk computation is made 
with the risk P-model by to substituting in it the appropriate probabili- 
ties of initiating events. The initiating events probabilities are assumed 
to be known either from tests of separate elements of the system or from 
experts’ estimates. 

The LP-method allows us to estimate numerically the object risk, 
to classify objects by the risk value and to analyze contributions of the 
initiating events to the object risk [1,2J. However, the direct application 
of the LP-method used in engineering, is impossible for estimation of 
the non-success risk in banks, business, and quality of companies or 
production. In development of the known LP-theory of reliability and 
safety by I.Ryabinin [1,2,59], used in engineering, we introduce new 
concepts and risk problems [7-9]: 

• Initiating and final events are considered on many levels; 

• Associative risk LP-models constructed by using common sense for 
events connection are considered too; 

• Problems of parametrical and structural identification of risk LP- 
models from the statistical data are solved; 

• New problems of the risk analysis on the basis of calculation of con- 
tributions of initiating events in the mean risk of the object set and in 
the accuracy of the risk LP-model are solved; 

• The scenario management by the non-success risk at stages of design- 
ing, debugging and operational tests, and operation are considered. 

11.2 Tabular representation of statistical data 

The statistical data for risk analysis and evaluation are presented in 
table form (Table 11.1). Table rows represent objects or states of the 
object i — 1,2,..., A”. Table columns correspond to the object signs 
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Table 11.1. Table “Objects and parameters” 



Objects 

i 


Sign 

Zi 




Sign 


1 


Sign 

z„ 


Output 

parameter,y 


1 






















































j 






















N 















Z\, . . . ,Zj, . . . ,Zn. The parameter in its turn can have grades r — 
1, 2, . . . , A^j, The grades are in cells of the table. The last table column 
contains the parameter of object effectiveness Y . The values of grades 
are considered as random variables or grade-events, which distribution is 
set by a discrete series, that is by values of grades and their probabilities. 

For measurement of signs or characteristics of the object scales are 
used: logical (true or false, 1 or 0), qualitative/enumeration (blue, red, 
etc.), linear order [a\ > a 2 >...> an), numerical (intervals [a,b]), etc. 

Generally, the grades are not ordered linearly and one cannot say, 
that the grade 3 is worse or better than the grade 4 for the final event. 
The final event also has grades. For example, a credit has the following 
grades: 1, if the credit is returned; 0, if the credit is not returned. 

The signs and grades are corresponded to random events, which re- 
sult in failures [7-9], and logical variables with the same symbols of 
identifiers. Sign-events (their number is equal to n) are connected log- 
ically by operations OR, AND, NOT. The grade-events for each sign 
form GIF. 



11.3 Basic equations 

The binary logic variable Zj is equal to 1 with probability Pj , if the sign 
j leads to the non-success, otherwise Zj is equal to 0 with probability 
Qj — l — Pj. The binary logic variable Zjr, corresponding to the grade r 
of the sign j is equal to 1 with probability Pjr , otherwise it is equal to 0 
with probability Qjr = 1 - Pjr- Binary vector Z{i){Zi , . . . , Zj, . . . , Z„) 
describes the object i from the table “Objects and signs”. In assigning 
the object i instead of the logic variables Zi, . . . , Zj, . . . , Zn it is neces- 
sary to substitute the logic variable Zjj. for grades of signs for the object 
i. We write down the general form of the non-success risk L- function for 
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any object 



V = V(Zu...,Zj,...,Z„). (11.1) 

and the non-success risk P-function of any object, given by the vector 

Z(i). 

Pi{V = llZ(i) = nPi,...,F,,...,Pn), i = l,2,...,7V. (11.2) 

For each grade-event in GIE we consider three probabilities: Wjr is 
the relative frequency of the grade in objects of the table “Objects and 
signs”; Pljr is the probability of the grade-event in GIE; Pjr is the 
probability of the grade-event to be substituted into (11.2) instead of 
the probability Pj. We define these probabilities for the j-th GIE as 
follows: 

Wjr = P{Zjr = l}\ = 1; r = l,2,...,7Vj; (11.3) 

r=l 

Nj 

Plj. = P{Z,, = l|Zj = 1}; y]Pl„. = 1; r = l,2,...,JV,-; (11.4) 

r=l 

Pjr = {Zj = l\Zjr = 1}; r - 1, 2, , Nj. (11.5) 

Here and subsequently we shall use j — 1, 2, . . . , n; r = 1, 2, . . . , for 
formulae, where n is the number of sign-events, Nj is the number of 
grade-events in j-th GIE . 

The mean probabilities Wjr, Pfjr aiid Pjr in OIE are equal to: 

Nj Nj 

Wjjn = l/Nj] Pjm = ^ Pjr • Wjr', Pljm = ^ Pljr ' Wjr. ( 11 . 6 ) 

r=l r=l 

The object risk Pj is calculated using (11.2) by replacing probabilities 
Pjr by Pj. We shall estimate probabilities Pjr during the process of 
algorithmic iterative training (identification) of the risk P-model by us- 
ing the data from the table “Objects and signs”. In the beginning it 
is necessary to determine the probabilities Pljr, satisfying (11.4), and 
further to pass from the probabilities Pl^> to the probabilities Pjr- The 
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number of the estimated independent probabilities Pjr is equal to: 

n 

i=i 

The connection of the probabilities Pjr and Pljr for the grades is ex- 
pressed through the mean values of the probabilities Pjm and Pljm'^ 

Pjr = Pljr-{Pjm/Pljmh ( 11 . 8 ) 

11.4 Examples of structural, logic and 
probabilistic risk models 

The structural risk model can be equivalent to a realistic one (for ex- 
ample, electrical system), it can be associative if based on the com- 
mon sense, or mixed. The non-success risk L-model of the “node” type 
(fig. 11.1, a) is stated as follows 

Y=^ZiVZ 2 V...VZj...VZn. (11.9) 

In words it mean that the non-success occurs if any one, or two, . . . , 
or all initiating events occur. After orthogonalization of the L-function 
(11,9) we have the following non-success risk P-model 

F ^ Pi + + P 3 . Qi . Q2 + . . . (11.10) 

In the risk LP-model the “arithmetics” is such, that for the final event 
the risk value belongs to [0,1] for any values of probabilities of initiating 
events. 

The non-success risk L-model of the “bridge” type (fig. 11.1, b) is 
represented in the normal disjunctive form as a logic sum of the shortest 
paths of successful operation: 

Y — ZiZs V Z 2 Z 4 V ZiZ^Z^ V Z 2 Z^Z^. (11.11) 

Orthogonalization of (11.11) provides the non-success risk P-model: 

Pi =P2P4pPlP3p qiP2P3q4P5pPiq2q3P4P5 -P\P2P3PA> (11.12) 
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11.5 Measure and cost of risk 

Let us introduce an admitted risk Pad separating the objects into good 
and bad: if Pi > Pad^ then the object is bad; if Pi < Pad-, the object is 
good (fig. 11.2, a). If the objects are classified into a greater number of 
classes, then a corresponding number of admitted risks: Padi^Pad2^ - ■ ■■> 
is introduced (fig. 11.2, b). . 

Let assume that the probabilities of grade-events Pjr,j = 1, 2, , . . , n; 
r — are known. Then, from the risk P-model we calcu- 

late risks of all N objects of the table “Objects and signs”. We plot 
these risks on the risk axis. If the resulting event Y has two grades 
(fig. 10.3, a), we choose the admitted risk Pad so that from N ob- 
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Figure 11,1. Structural models of risk: (a) - unit type; (6) - bridge type 
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Figure 11.2. The scheme of classification of objects by risk: (a) — into two classes; 

(b) — into several classes 
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jects are bad and Ng are good. For the object i, the distance between 
the risk Pi and the admitted risk Pad is a natural measure of its being 
“good” or “bad”: 



di^\P^-Pad\. (11.13) 

The object risks can be represented in a different manner. We calculate 
the numbers of objects Nad and Ni having risks, respectively, smaller 
than the admitted risk Pad and smaller than the risk Pi of the object i 
and establish the following risk measures: 

1) The relative number of objects having risks, respectively, smaller 
than ai and greater than the risk bi of the object i under consideration: 

a^^Ni/N; bi ^ I - af, (11.14) 

2) The relative numbers of good, fi, and bad, e^, objects having risks 
greater than that of the considered object i among the good and bad 
objects: 



h = {Nad-Ni)/N^i-, e, = (Ni-N^)/{N (11.15) 

The above measures are used to calculate the cost of risk, for example, 
rate on credit. The simplest formula of the risk cost is as follows: 

Ci = Cad + C-(Pi-Pad), (11.16) 

where the cost of admitted risk Cad and the coefficient C are chosen by 
the bank on the basis of the market conditions. 



11.6 GIE and the Bayes formula 

Connection between probabilities of grades Pjr and Pljr in GIE is ex- 
pressed in terms of the mean values of probabilities Pjm and Pljm (11.8). 
We shall prove that this fact follows from the Bayes formula. The con- 
dition probability P{Hk/A) that a hypothesis Hj. is true after the event 
A happens, is given by the following formula: 

P{Hk/A) = P{Hk) ■ P{A/Hk)/P{A), (11.17) 
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where 



m 

i=l 

and hypothesis Hi^ z = 1, . , . , /c, . . . , m, form a complete GIE. 

There are usually many GIE in risk problems. For Xj, each group 
form a complete GIE of Xjr, r = 1, . . . ,Xj. Therefore, for simplicity 
the following notation is introduced for the j-th GIE that is equivalent 
to (11.8) and also to (11.3)-(11.6). 



Event A = Sign- Event Zj 
Hypothesis = Grade- Event Zjr 
Probability P{Hj^) = Wjr 



Probability P{Hk/A) = Pljr 
Probability P{A/Hk) = Pjr 
Probability P{A) = 



We are going to use the Bayes formula only for training the risk LP- 
model on the statistical data by solving the corresponding problem of 
optimization. Therefore, there is no sence in discussing here “a priori” 
and “a posteriori” probabilities in the real sense. The Bayes formula 
can be written down formally in terms of Pljj. instead of Pjr or, on 
the contrary, in terms of Pjr instead of Pljr. For the procedure of 
optimization (identification) of the risk LP-model, the Bayes formula is 
written down in terms of probabilities P,>: 



Pjr — (-Fljr ■ ^jm) /^jr-) (11.18) 

which allows us to decrease by one the number of independent probabil- 
ities Pljr in the GIE in comparison with generation of the probabilities 
Pjr. Estimation of accuracy of the probabilities Pljr also becomes sim- 
pler — indeed, the sum of probabilities Pljr in GIE is equal to 1 (100%). 

However, one meets difficulty in using (11.18) because for a limited 
number of statistical data the denominator can turn to zero. Therefore, 
it is suggested to make use of (11.8) to relate the probabilities Pjr and 
Pljr in the GIE. 

Example 1 . Consider a complete set of risk objects of the “node” 
type with three sign-events Z\, Z 2 , Z 3 [8,9]. Each of the sign-events has 
two grades, 1 and 2. The number of distinct objects in the complete set 
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Table 11.2. Initial probabilities and characteristics of the grade-events 



Signs 


Grades 


Pjr 


W,, 


Pjm 


Pljr 


Pljm 






1 


0,05 


0,5 


0,075 


1/3 


0,5 


0,15 




2 


0,10 


0,5 




2/3 






^2 


1 


0,15 


0,5 


0,175 


3/7 


0,5 


0,35 




2 


0,20 


0,5 




4/3 






^3 


1 


0,25 


0,5 


0,275 


5/11 


0,5 


0,35 




2 


0,30 


0,5 




6/11, 







is = 2^ = 8. The risk LP-functions for each object are as follows: 

VZ2VZ3; (11.19) 

P{Y = 1} = Pi + P2 . (1 - Pi) + P3 ■ (1 - Pi) ■ (1 - P2). 

We fix arbitrary values of the probabilities of grade-events Pjr (Table 
11,2), calculate first Wjv, Pjm, P^jm, Kj for all three GIE’s and then 
probabilities Pljr using the Bayes formula (11,18) (which is equivalent 
to (11.8) for the complete set of different objects). 

Calculate the risks Pi of all objects in the complete set of different 
objects (Table 11.3) from the accepted values of the probabilities of the 
grade-events Pjr- As an example we choose in Table 11.3 three objects, 
which maximum values of risk. With this aim in view, we define the 
admitted risk Pad — 0,462, so that only for three objects their risk is 
greater than the admitted risk. These three objects are declared as bad, 
that is, y = 0. 

The problem of identification of the risk LP-model by statistical 
data makes use of the signs Y of object classification and descriptions 
of objects by their grades. The obtained results explain the following 
important properties of GIE consideration [8,9]: 

1. For training the risk LP-model not taking into account GIE, one 
has to determine six probabilities Pjr,j = L2, 3; r — Nj = 2. For 
training the risk LP-model taking into account GIE, one determines 
three probabilities Pljr (one in each GIE), 

2. For uniting the grades of each sign into one grade, instead of eight 
different objects we get only one “averaged” object with the probabilities 
of events ^1,^2, ^3 being equal, we get to Pi — Pim — 0.075; P2 = 
P 2 m = 0.175; P 3 = Psm = 0.275 respectively (Table 11.2). For this 
object, the risk is Pm = 0.4522. The introduction of grades for the 
signs and GIE allows us to distinguish objects in risk within the range 
P = 0.394 -y 0.496 (Table 11.3) instead of assigning them the same value 
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Table 11.3. Non-success risks of objects 



Obj- 

ects 


Grades 


Grade- 

events 


Z 2 

Grades 


Grade- 

events 


Z 3 

Grades 


Grade- 

events 


Estimation of 
risk Pi = P{Y) 


The sign 
of class Yi 


1 


1 


^11 


1 


Z 21 


1 


Z 31 


0.394375 


1 


2 


1 


^11 


1 


Z 21 


2 


Z 32 


0.43475 


1 


3 


1 


^11 


2 


Z 22 


1 


Z 31 


0.43 


1 


4 


1 


^11 


2 


Z 22 


2 


Z 32 


0.468 


0 


5 


2 


Zl2 


1 


Z 21 


1 


Z 31 


0.42625 


1 


6 


: 2 


Zl2 


1 


Z 21 


2 


Z 32 


0.4645 


0 


7 


2 


Zl2 


2 


Z 22 


1 


Z 31 


0.460 


1 


8 


2 


Z\2 


2 


Z 22 


2 


Z 32 


0.496 


0 



of the mean risk Pm ™ 0.4522. 

3. For training the risk LP-model, one needs to use the modified 
Bayes formula (11.8) to relate the probabilities in the GIE in the presence 
of limited amount of statistical information. This makes training of the 
risk LP-model possible. 

11.7 Dynamic risk LP-models 

At the first sight, the risk LP-models are static models, because they 
do not include time explicitly. However, this opinion is erroneous, since 
actually risk LP-models are always used as dynamic models with sub- 
stitution of probability values of initiating events at the real time. And 
the risk LP-models can be built from the initial stage as dynamic ones. 
Let us consider some ways of construction of dynamic risk LP-models. 

As an example we construct the risk LP-model for the classical figures 
of the Technical Analysis (TA) for the financial and commodity markets, 
represented by linear diagrams and Japanese candles (fig. 11.4) [75]. 

For the classical figure “Head and Shoulders” we shall introduce the 
sign-events (axis X) and grade-events (axis T), which are marked by 
asterisks (*) and have numbers. That is, signs and grades are used 
instead of values of rates (of currencies or goods) and discrete time. 
The total number of sign-events is equal to 7, and the total number 
of grade-events is equal to 26. Now it is possible to distinguish a lot 
of figures “Head and Shoulders”, which differ by their grades, and to 
calculate their risks. 

For training the risk P-model it is necessary to collect statistics. 
For this purpose we look through the linear diagrams of the currency 
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a - Head and Shoulders 




Signs (Time) 



b - Hammer 
I Bearish 




1 
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1 




2 3 



Signs (Time) 



Figure 11.3. Construction of the dynamic risk LP- model 



rate, choose classical figures of one type, fix signs, grades, and the result 
of the success of the event of buying / selling (Y — 1/0). After the 
sufficient information is gathered, the risk model is trained and is used 
for forecasting risk of buying / selling for each new classical figure of 
this type. 

The decisions in the risk P-model are made in the following sequence: 
1) recognition of the classical figure in the dynamic mode from the dia- 
gram; 2) the decision-making for buying / selling in dependence on the 
risk. It is also easy to take into account the factors of “Volume of sales” 
and “Open interest”. For this purpose we shall introduce two signs 8 
and 9 (fig. 11.4), Let each of these signs have three grades. For example, 
sign 8 has grades: 1 means that the sale volume grows, 2 means that the 
sale volume does not change, 3 means that the sale volume falls. Thus, 
we construct the risk L-function by nine signs. Such model is hybrid, 
since it contains both sign-events (time) and usual sign-events. 

In TA the risk LP-model can be constructed for the Japanese can- 
dles (fig. 11.4) too. On the axis X we introduce sign-events Z 2 , Z 3 
for each of three candles in fig. 11.4. Besides, we introduce element- 
events Zii, Z 12 , Zi 3 for description of the form of the first candle and 
other candles (top shadow, body and bottom shadow), respectively. 
For each element-event we shall define some event-grades (for exam- 
ple, ^ 121 ,^ 122 ,-^ 123 ,^ 124 ) for the body of the first candle, which are 




The risk LP-theory with GIE in the classification problem 221 



designated by asterisks * and have appropriate numbers on the axis Y. 
Now, after training of the risk LP-model, it is possible to distinguish 
many figures of different types and to calculate the risk for them. 




Chapter 12 



IDENTIFICATION OF RISK LP-MODELS 
WITH GROUPS OF INCOMPATIBLE EVENTS 



As is stated above, construction of risk logical functions are carried out 
by using the minimal path of successful operation, minimal path of dan- 
gerous operation, minimal section of failure of systems, minimal section 
of prevention of danger, and scheme of function integrity. Construc- 
tion of risk probabilistic functions are fulfilled by orthogonalization of 
risk logical functions, identification of risk probabilistic functions, and 
non-linear optimization. 

In view of the complexity of identification (training)problem, it is 
solved by the algorithmic methods. The following scheme of the problem 
solution is proposed. Suppose that first approximation for probabilities 
of grades r = 1, 2, . . . , ; jf‘ = 1, 2, . . . , n are known and the risks 

i — 1, 2, . . . , A^, of objects of the table “Objects and signs” are calculated. 
We shall determine the admitted risk P^d (fig- 11.2) so as to have the 
given number of good objects Ngc with the risk less than the admitted 
one and, accordingly, the number of bad objects A'fcc = ^g—^gc with risk 
more that the admitted one. On the step of optimization it is necessary 
to change probabilities r — 1,2,..., Nj; j = 1, 2, . . . , n, in such a 
way that the number of correctly recognized objects F increases. 

It is notable that variables Pad and Ngc are one-to-one related. In 
the problem solution algorithm it is more convenient to set Ngc and to 
determine the admitted risk Pad, because the latter would have to be 
set with the precision 6-7 digits after the decimal point. 

The condition Pi > Pad let distinguish the following types of ob- 
jects: good/good (their number is Ngs) are good by the technique and 
statistics; good/bad {Ng — Ngs) are good by the technique and bad by 
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statistics; bad/good (Nb - N^s) are bad by the technique and good by 
statistics; bad/bad (N^s) are bad by the technique and statistics. The 
object risks of good/good, bad/good, good/bad, bad/bad move about 
Pad when Pjr changes. If some objects pass to the right from Pad on 
the value of risk (fig. 11.2), then the same number of objects pass to 
the left. Optimal change of Pjr will be that which moves objects of 
good/bad and bad/good through Pad towards each other — then, the 
criteria F is increased by two units. 

Thus, the identification of the risk P-model consists in the deter- 
mination of optimal probabilities Pjr, r = 1, 2, . . . , j = 1, 2, . . . , n, 
corresponding to the grade-events [7-9]. 



12.1 Statement of identification problem 
and algorithm of its solution 

Statement of the problem. The problem of identification of the risk P- 
model is formulated as follows. 

Specified data: the table “Objects and signs” with Ng good and 
bad objects and the risk P-model (11.9), (11.10) are given; 

Expected results: probabilities Pjr, r — 1,2, Nj\ j = 1,2,. .. ,n 
for grade-events and the admitted risk Pad, separating the objects into 
good and bad ones based on their risk should be determined ; 

We need: to maximize the criterion function (CF), which is the 
number of correctly classified objects: 



F = NbsP Ngs ^ max, (12.1) 

where Ngs,Nbs are the numbers of objects classified as good and bad 
using both the statistics and the risk P-model (both estimates should 
coincide). 

Prom (12.1) it follows that errors or accuracy indicators of the risk 
P-model in the classification of good Eg, and bad E^ objects and in 
classification of the whole set Em are equal: 



Eg = {Ng - Ngs)/Ng- = {N^ ~ Nbs) / Nf, Em ^ {N ~ F)/N. (12.2) 



Imposed restrictions: 
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1) probabilities Pjr and Pljr have to satisfy the condition: 

0<P,v<l, j = l,2,...,n; r - 1, 2, . . . , iV,-; (12.3) 

2) the average risks of objects Pm based on the risk P~model and on 
the table Pav must be equal; while training the risk P-model we should 
correct the probabilities Pjr on every step of iterative training: 

Pjr = Pjr * (Pav /Pm); r = 1, 2, . . . , j = l,2, (12.4) 

3) the admitted risk Pad should be determined at the given ratio of 
incorrectly classified good and bad objects, in view of non-equivalence 
of losses by their wrong classification: 



Egt = {Ng - Ngs)/{N, ~ iV,, ) . (12.5) 

The solution algorithm for the identification problem. In view of the 
identification problem complexity, we shall solve it by the algorithmic 
method. The identification algorithm of the risk P-model is proposed; 
it iteratively generates Pljr, Pjr, so as to maximize the value of the 
criterion function F. We choose appropriate values for the computed 
number of good Ngc and bad Nf,c — N — Ngc objects. These values 
for the procedure described below are constant. We denote steps of 
optimization by 0, 1 , 2, , Nopt^ 

Initial step: 

1. To set initial values and Pl^^ for r =: 1,2, Nj] j = 1, 2, . . . , n. 
The choice of initial values should be made by the average risk Pav and 
properties of probabilities of grade-events (11.3) and Pljm from (11.6); 

2. To calculate P?^ and Plj^ (H-6); 

3. To assign a small value to the function Fmax, say, F = Pav • N; 

4. To compute from (11.8) Kj = P?^/P1^^. 

Subsequent steps. We will optimize the criterion function iteratively 
for steps 1, 2, . . . , , Nopt {Nopt cannot be more then N/2) until the 

criterion function increases. The number of the step changes when the 
condition F > Fmax is satisfied. Here F and Fmax are the current and 
earlier found value of the criterion function. 

5. To generate small increments dPV/^, r ~ 1,2, ... ,Nj\ j ~ 1,2, . . . ,n\ 




226 E. D. Solojentsev 



6. To compute new normalized values the formula 



Nj 

PI", = (PI”, + dPjr")/ X^[P1”, + dPl],]- (12.6) 

r—1 

7. To compute Pj^ from the expression: PJ^ = Kj ■ PPj^] 

8. To compute risks of all objects Pf — Pr{Y ~ l\Z{i)] using the new 
value of P^^\ 

9. To compute the mean risk for objects P^ using P-’, i — 1, . . . ^ N and 
the mean risks Pljm and Pjm, using Wjr, Pjr,Pljr ( 11 . 6 ); 

10. To determine Pad from P-’ so as to obtain Ngc and Nbc] 

11. To compute with Pad and P^, i = 1,2, . . . ,N; 

12. If > Fmax, then to set 

F — PI . — pill . p. _ pP . 

max — ^ i .1 J-jr — -i ^ jr — jr' 

K =P'^ /piP . T^v+l j^y /pv /p \. 

13. If the criterion function does not strictly increase after a chosen 
number of trials Nmc (dead- lock), then Fmax Is reduced by 2-4 units 
[F = Fjjiax — dF) and optimization continues. 



12.2 Methods of identification 

The formulated problem of identification of the risk P-model has the 
following features and complications: 

1) The criterion function depends on a large number of real positive 
arguments Pp (for example, this number is equal to 94 in the problem 
of the credit risk of the physical persons [7,8]); 

2) The criterion function accepts integer values and it is stepped; 

3) The derivatives of the criterion function F with respect to parameters 
Pjr cannot be computed; 

4) The criterion function, in view of the risk P-model structure, has local 
extremums; 

5) In the search of the optimal Fmax h is impossible to increment pa- 
rameters Pjr by arbitrary positive or negative values because it would 
change the average risk. 
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Now rigorous methods of solution of the similar problems of optimization 
do not exist. Let us consider some approaches to the problem solution. 

Method of random search. For finding dPljr we use the following 
formula [7-9]: 



dPljr = ki ■ {Nopt - Nt) • tan(fc3), (12.7) 

where ki is the coefficient of identification speed; Nopt^ Nt are the maxi- 
mal allowed and the current number of optimization steps for the crite- 
rion function; ks is a random number from [-tt/2, tt/2]. 

The obtained values Pljr are normalized by (12.6). New values 
Pljr obtained with F > Fmax, are considered optimal and saved. If in 
a given number of random attempts Nmc the criterion function does not 
increase, then we carry out the earlier described operation of deviation 
from the purpose. If some values Pljr become negative or exceed 1, then 
we set them to 0 or 1 respectively. The convergence of the optimization 
method is guaranteed by the second factor in (12.7), which approaches 
0 as Nt grows. 

Method of small increments. The method of identification of the 
risk P-model on the basis of the random search of parameters Pljr, 
r — 1, 2, . . . , A(j'; j — 1, 2, . . , , n is very labor-intensive and the calcu- 
lations by the method are non-repeatable. The determinate method of 
identification of risk P-model by a small increment Pljr, using the sign 
of change of the criterion function, is developed in [7-9]. 

The special change (for determinate of the sign) of the probability 
for the chosen grade-events is calculated as follows: 

dPljr = Ki • Pljr, (12.8) 

where K\ is the coefficient of the relative increment. Further we calculate 
new values Pljr,Pjr for the chosen grade-events: 

Pljr — Pljr — dPljr', dPjr = Kj ■ Pljr- 

After that, we calculate the value of criterion function Fj and its incre- 
ment for the chosen grade-events: 
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Then we restore initial probabilities of grade-events Pljr, Pjr- 
Pljr — P^jr dPljr't dPjr — Kj • 

The calculations are consistently carried out for all grade-events with 
the probabilities Plj>, r 1, 2, . . . , ; j = 1, 2, . , . , n, and the 

individual increment dPjr for grade-events are obtained. Using signs 
of increments dPjr, we calculate the new values of probabilities for the 
grade-events: 



Pljr = Pljr-K3-sign{dFjr), r = l,...,Nj; j = 

( 12 . 10 ) 



where is a small increment of probabilities. 

The probabilities Pljv, r = 1, 2, . . . , j — 1, 2, . . . , n, are normal- 
ized by using (12.6). The process of calculations repeats Nopt times. 
The criterion function value and all parameters of training dPc^ Em, 
Eg, Eb, Egt, Pjm, P^jm, Ej are calculated. Probabilities Pljr, Pjr, 
r — 2, ... ,Nj] j — \,2, . . . ,n and the admitted risk Pad for F > Fmax 

are memorized. 

Likelihood maximum method. Let us write down the functions of the 
likelihood maximum separately for bad and good objects (in statistics): 

Nb Ng 

io = Ei°g(a6); = (12.11) 

i=l i=l 

For example, using the random search, we can solve the identification 
problem with storing of new values Pjr, if the following condition holds: 

{Lb{v) > Lb{v - 1)) V {Lg{v) < Lg{v - 1)) (12.12) 

In other words, an attempt is made here to segregate, as far as pos- 
sible, the distributions of good and bad objects. There is such optimum 
division of distributions, to which Fmax corresponds. 

The likelihood maximum method, providing indirect optimization 
“on average”, does not give the maximum possible value of criterion 
function [7]. However, it is possible to use this method, having smaller 
time of calculations for optimization, for finding good initial approxima- 
tion of estimations of the probabilities Pljr and Pjr- 
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Illustrations for the identification in risk. Let us show the graphic 
illustrations of the identification process of the risk P-model by the ran- 
dom search method. The calculations were carried out by PC for the 
credit risk LP-model of the physical persons. The risk LP-model has 20 
sign-events (correspondingly GIE) and 94 grade-events. The credit risk 
L-function in the disjunctive normal form [7~9] is as follows: 



r = Zi VZ 2 V... VZ 20 . (12.13) 

The latter can be formulated as follows: non-success occurs, if any one, 
or any two, ... or all initiating events happen. The credit risk L-function 
in the orthogonal form can be written in the form (after (12.6)) : 

Y = Zi V Z2Z1 V ZSZ2Z1 V . . . 

The credit risk P-model is given by the formula: 

P = Pid- P 2 Q 1 + P 3 Q 1 Q 2 + . . ■ . (12.14) 

The investigations were carried out in a set of N = 1000 credits of the 
standard package, Ng = 700 of which were good and = 300 were 
bad [76]. The credit is described by n = 20 signs, which in the sum have 
94 grades. 

Signs of the credit are the following: 1 is Balance of Account in Bank, 
2 is Duration of Loan, 3 is Credit History, 4 is Intended Use of Loan, 5 is 
Amount of Loan, 6 is Securities Account, 7 is Duration of Employment, 
8 is Payment to Partial Discharge (in % of available income), 9 is Marital 
Status and Gender, 10 is Common Liability or Guarantee, 11 is Time 
of Spent in Current Residence, 12 is a Type of Guaranty, 13 is Age, 
14 is Other Loans, 15 is Accommodation, 16 is Number of Loans in 
Bank Including new Loan, 17 is Profession, 18 is Number of Relatives 
Dependent for Support, 19 is Phone, 20 is Citizenship. 

Then, the investigations on the identification were carried out for 
the following initial data: N = 1000, Ng — 700, Nb — 300, Pay — 0.3, 
Ngc = 610. The maximal value of the criterion function was found to 
be equal to Fmax = 811. 

Looking at the histogram (fig. 12.1) of the risk distribution for all 
objects and objects, for which the classification by the risk LP-model 
and the statistics do not coincide, it is possible to make the following 
conclusions: 
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1. The distribution of the object risk is not submitted to the normal or 
any known law of distribution; 

2. The distribution of the object risk for good/bad and bad/good objects 
is asymmetrical; the non-symmetry depends on the ratio Ng/Ngc\ for 
Ng = Ngc the distribution is symmetric (the number of the good/bad 
and the bad/good objects are equal). 

The process of training is not monotonicly growing. This is confirmed 
by the change diagrams of estimations of probabilities Pjr (fig. 12.2), the 
average risk Pm and the criterion function Fmax (fig- 12.3) in function 
of the number of optimization Nopt- At the final stages of the optimiza- 
tion process, when the increments of estimations dPljr tend to zero, 
the optimization process asymptotically approaches the extremum. The 
stepped criterion function during the optimization is increased on an 
optimization step by an integer number (more often it is two). The 
section of the criterion function, constructed after end of the optimiza- 
tion process by changing only one parameter Pjr with a small step dPjr 
(fig. 12.4), shows that the height of steps is also equal to 2. The width 
of steps increases when Pjr moves from its optimum value. 

The smoothed diagrams of risk distribution for all, good and bad 
objects (on statistics) are shown in fig. 12.5. 

12.3 Choice of initial values and parameters 
of training 

The risk LP-model identification, as the process of algorithmic iterative 
training, should begin with a choice of some initial values and the train- 
ing parameters. These are the initial values of probabilities Pljr and 
Pjr of grade-events; the calculated number of good objects Ngc, the risk 
average value Pz for object set, etc. 

Determination of the calculated number of good objects Ngc. 

The calculated number of good objects Ngc and the admitted risk Pad 
are determined from the given ratio E^g of incorrectly classified good and 
bad objects due to non-equivalence of losses by their wrong classifications 
(12.5). The ratio of these mistakes is prescribed, in the case of the credit 
risks its value Egjy is equal to 2 — 4. The needed value Ngc is determined 
after several calculations for dilTerent Ngc- 

As an example of determination of Ngc we shall present results of 
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training of the risk P-model of the physical persons on statistics of 1000 
credits, from which 700 was good and 300 was bad (the example from 
Section 12.2). For the risk model training different numbers of good 
credits were used: Ngc = 550, 580, 610, 650, 700, 750, 800 (Table 12.1). 
We computed risks Pi of each of 1000 credits; maximum of the crite- 



Number of 
objects 




Figure 12.1. Histograms of distributions of objects on risk 
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rion function Fmax, numbers of correctly recognized objects Ngs and 
Nhs, errors in recognition of credits Eg, E^,, E^, the admitted credit risk 
Pad'j the ratio of numbers of not recognized bad {b/g) and good (g/h) 
credits Eg}). 

Parameters of the variants Ngc = 610 and Ngc — 650 are as follows: 
E}) = 0.167, Eg = 0.201, Ejn = 0.191 and of variant Ngc = 650 are: 
E}j = 0.207, Eg = 0.161, Ejn = 0.175, respectively. The optimal variant 
is established by the admitted value of ratio Egi, = 2.65. The variants 
Ngc = 610 and Ngc = 650 have symmetrically different mistakes of 
evaluations E^ and Eg (fig. 12.6). 

Variants Ngc = 700 and Ngc=760, though have a greater value of the 
criterion function, can not be accepted as optimal ones because of the 
large error of recognition of the bad credits E^. 

Choice of the average risk Pz. The risk average statistical value 
Pav is known from the table “Objects and signs”. During training of 
the risk P-model we obtain a computed average value of the average 




Figure 12.2. Diagrams of change of estimations of probabilities Pi,i and Pi 9,2 for 
event-grades in function of optimization number Nopt 
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Figure 12.3. Diagram of change of the mean risk Pm against the optimization 

number Nopt 



Table 12.1. Results of calculations for different numbers of good objects Ngc 



Ngc 


0 


550 


580 


610 


650 


700 


750 


800 


1000 


Fmax 


300 


767 


787 


809 


825 


829 


831 


819 


700 


Ngs 


0 


508 


533 


559 


587 


614 


640 


659 


700 


Nbs 


300 


259 


254 


250 


238 


215 


191 


160 


0 


Eg 


1.0 


0.274 


0.238 


0.201 


0.161 


0.123 


0.10 


0.058 


0 


Et 


0.0 


0.137 1 


0.153 


0.167 


0.207 


0.283 


0.363 


0.466 


1.0 


Era 


0.7 


0.233 


0.213 


0.191 


0.175 


0.171 


0.169 


0.181 


0.3 


Pad 




0.3010, 


0.3012 


0.3016 


0.3021 


0.3031 


0.3039 


0.3049 




Egb 




4.55 


3.53 


2.65 


1.77 


1.0 


0.51 


0.213 





risk Pm- Questions arise, which average value of the risk Pz should be 
chosen to train the risk P-model and how the value Pz influences the 
criterion function Fmax- The identification results of the risk P-model 
for different values Pz, shown in fig. 12.7, allow us to make the following 
conclusions: 



• The maximal value of the criterion function Fmax formally does not 
depend on the value Pz', 
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F max 




Figure 12.4. Diagram of change of criterion function Fmax in function of the 
optimization number Nopt 



• For different Pz, naturally, we obtain different values of probabilities 
Pjr, admitted risk Pad and the object risk distribution characteristic 
dPc — Pi max Pimin'i 

• The risk P-model obtains the probabilistic sense for Pz = Pm 4- Pav 
only, because in this case all results agree with the average risk by the 
real data table. 

Way output of impasses during optimization. Impasses can 
happen in training of the LP-model, when in a cycle from Nmc attempts 
of finding optimal probabilities of grade-events P\jm> Pjr we have no im- 
provement of the criterion function Fmax- Then we make the described 
earlier deviation from the purpose to 2-4 units. 

The meaning of this trick is the following. The discrete criterion 
function can not pass to a higher level, since it is possible to change 
Pljr only by the value determined by (12.7). Therefore we reduce the 
obtained value of Fmax- 



F ~ F - (iF 

max -I 



(12.15) 
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Figure 12.5. The section of criterion function Fmax in one of the probabilities Pjr 

where dF is the value of deviation dF = 2 -F 4. When optimization 

1000 
N 

Ng 
Nb 
0 

NgCOpt Ngernax Ng. = N 

Figure 12.6. Diagram for the object function of optimization problem. Selection of 
the calculated number of good credits 
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Figure 12.7. Diagrams for the object function of optimization problem. Influence of 

the mean risk 

continues, the criterion function tries to reach the former value Fmax- 
However, new calculation will give other values of probabilities Pljr and 
Pjr of grade-events. Therefore the trajectory of optimization will be dis- 
torted and, as a result, the criterion function can get out of the deadlock 
condition. The deviation from the purpose is typical for optimization 
steps in the middle of the optimization process 

Determination of global extremum of the criterion function 
Fmax. Depending the parameters k\, Nopt, in the of training formula 




dPc 



Figure 12.8. Diagrams for the object function of optimization problem. 
Determination of the global extreme 
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Figure 12.9. Distribution of good, bad and non-correctly classified objects by risk 



(12.7) for chosen Ngc and Pz we obtain different values of the criterion 
function Fmax (different local extremum). The solution in each of the 
local extreme we shall characterize by Fmax and by the difference of the 
maximal and minimal credit risks of objects dPc — Pi max “ Pi min in fbe 
table “Objects and signs”. 

The stepped dependence of Fmax on the parameter dPc is shown in 
fig. 12.8. It has an extremum for some value dPc, to which a certain set 
of parameters k\, Nopt, corresponds. The solutions Pl^> and Pjj. in 
the extremum of the criterion function are accepted as optimal. 

The criterion function Fmax bas the maximum for some value of 
the characteristic dPc. We shall explain this fact with the help of a 




Figure 12.10. Dependance of the object distribution characteristic dPc on the 

parameter Ag 
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simple diagram (fig. 12.9) and simple calculations. It is accepted that the 
risks of good and bad objects are distributed according the triangle law. 
The triangles AGB, CBD, COE are considered; their areas are equal to 
the known numbers of the good, bad and incorrectly classified objects, 
respectively. The base sides and heights of triangles are variables; only 
two of them are independent, for example, Ag and Ag^. Distribution 
characteristic in object risks is equal to: 



dPc = Ag^Ab-Agt (12.16) 

Using results of calculations, we construct the diagram for the char- 
acteristic dPc on Ag, (fig. 12.10). It shows that the diagram dPc on Ag 
has the maximum. Thus, the maximal value of the criterion function 
Fmax has the optimal value dPc. 

Accuracy of calculation of probabilities of grade-events. Us- 
ing the example of the risk calculation for N = 1000 credits, we shall 
estimate the necessary accuracy of calculations of probabilities Pljr, 
Pjr, r — 1 , 2 ,..., Nj\ j = 1,2, ... ,n and the admitted risk Pad- In 
the example the credits have different sets of grades and the classes of 
good and bad credits do not intersect. Using results of investigations, 
following [77] we set the parameter dPc to be approximately equal to: 

dPc ~ Pi max Pi min — 0 . 1 . 

Then adjacent (in risk) credits differ on average by the value: 

dPim = dPc/N = 0 . 1/1000 = 0 . 0001 . 

In the interval [P^, Pad] the density of risk distribution is approximately 
M = 100 times higher than on average (see fig. 12.1 and fig. 12.5). Cred- 
its, which are neighboring in risk, should differ in the interval [P^, Pad] 
by the value: 



dPi = dPimlM = 0 . 0001/100 = 0 . 000001 . 

In the algorithm of risk model training the number of good credits Ngc 
is given and the admitted risk Pad is selected by an iterative process. 
The first approximation of the admitted risk is set to be equal to the 
average risk Pad ~ Pm- Then we compute the calculated number of 
good credits Ng. If Ngc is not equal to Ng^ we increase the admitted 
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risk Pad — Pad + dPad- After that, we compute Ng again, etc. until 
condition Ngc — Ng is satisfied. It is clear that the value of Pad should 
not contain risks for more than one credit. The accuracy of calculation 
of the admitted risk is equal to: 



dPad = dP^ = 0 . 000001 . 



Now we can evaluate the accuracy of calculation of the probabilities Pjv, 
r = 1,2,..., Nj] j = 1, 2, . . . , n. The accuracy of calculation of Pjr is 
equal to: 



dPjr = dPad/n = dPad/20 = 0.00000005. 

It is necessary to know the accuracy of dPjr for choosing the training 
speed coefficient K\. 

Time of training. We shall estimate the time of training by the 
example of identification of the credit risk P-model. The following pa- 
rameters influence the time of training: 

• The number of attempts of optimization Nmc on one step. The num- 

ber was fixed so that = 150 -r 300. First, the optimization goes 
by random search but further “impasses” are often met. After pertur- 
bation of the achieved Fmax the next best decision is found for 1 30 

attempts and then it is possible to reduce the number Nmc- 

• The number of optimizations Nopt- The criterion function value usu- 

ally increases by 2 and its initial value is set up by the formula Fmax = 
N/2. Then the optimization number is necessary to set to Nopt — N/i. 
In the beginning of the optimization process the criterion function in- 
creases by 2 20. Some reserve in the choice of Nopt is necessary 

because of the large number of “impasses” . 

• The time of search of the admitted risk Pad- As the first approximation 
we use Pad = Pm- Then we use the method based on bisection. 

• Initial approximation of PI jr and Pljr- The best solution is to take 
initial approximation from results of the previous identification. How- 
ever, we shall consider this problem in detail. 

Initial values of probabilities of grade-events. There are some 
ways of setting initial values of probabilities Pljr and Py. 
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• Probabilities Pjr, r = 1,2, Nj; j = 1,2, ... ,n, are identical and 
are equal to the average value, which is easy to calculate from the 
average risk of objects Pav by statistics; 

• Probabilities Pljr, v = 1, 2, . . . , j ~ 1,2, ... ,n are equal to the 
average value in GIE, easily calculated and depending on the number 
of grades in groups; 

• Probabilities Pljr, Pjr are equal to the values obtained in the previous 
session of the optimization; 

• Probabilities Pljr, Pjr are determined by results of statistical or com- 
binatorical risk analysis on the statistical data. These ways are con- 
sidered in Chapter 13; 

• Probabilities Pljr,Pjr are equal to results of optimization by other 
methods, for example, by the method of small increments or the 
method of maximum of likelihood. 

Accuracy estimation of the trained risk LP-model. Tradi- 
tionally, the recognition theory uses the training sample for the model 
training, and the accuracy of the trained model is checked on the test- 
ing sample. It is also necessary to make when using neuron networks. 
Because of the large number of estimated coefficients (weights) in the 
network, it is possible to train the classification model with zero val- 
ues of recognition mistakes, but on the testing sample the recognition 
mistakes will be large. 

The accuracy check of the risk LP-models, which use training and 
testing samples, has shown their high accuracy. The deviation in the 
estimation of accuracy on the training and testing samples for various 
ways of formation of these samples did not exceed plus or minus one per 
cent [7-9]. 

However, for the risk LP-models use of testing samples is seemed 
to be excessive. In the identification problem it is necessary to use 
all statistical data (not dividing them into training and testing ones) 
for identification/training. The more data we have for training, the 
more precisely parameters/probabilities Pljr^ Pjr, 'f' = = 

1, 2, , . . , n, of the risk LP-model are estimated. The estimations of Pljr, 
PjY, r = 1, ... ,Nj\ j — l,2,...,n, tend asymptotically to the true values 
as the objects number N increases. 

For identification problems other methods for checking accuracy and 
models adequacy are used. They consist in calculation of estimation 
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dispersion of parameters / probabilities. Methods, which can be used to 
obtain these estimations, will be discussed in the following section. 

12.4 Optimization in identification problems 

It is known that multiparametric multicriterion optimization for learning 
of logical-probabilistic model is an extremely difficult problem [78] and 
has some features and complications [7-9]: 

• the criterion function Fmax is the number of correctly recognized good 
and bad objects, i. e. it accepts the integer values and it is a stepped 
function; 

• the criterion function has local extreme and it depends on a large 
number of real- valued positive parameters; 

• derivatives of the criterion function with respect to the probabilities 
Pljr cannot be computed. 

The criterion function Fmax shown in fig. 12.11 is a function of two 
parameters only. It is a stepped function. The steps have hight equal 
to 2 and different width. The parameters Pli and PI 2 belong to the 
interval [0,1], but may differ in magnitude by one order. The wight of 
steps decreases when approaching to the extremum. 

Optimization may be delayed on any step without attaining the max- 
imum or crossing it. The variation of the criterion function in a mul- 
tidimensional space remains the same. We remind that the dimension 
of the space of optimization parameters for the logical-probabilistic risk 
model of the credit risk is equal to 94. 

12.4.1 Formulae of optimization 

Neuron network learning principles underlie the identification of the risk 
LP-model by the random search method [79]. For identification of the 
risk LP-model, the probabilities in a group of incompatible events are 
interrelated by the formula for the calculation of the variation of prob- 
abilities of grades: 

dPljr ^ Ki ■ (1/Nt) -taniKs); r = 1, . . . , TV^-; j = l,...,n, (12.17) 



where K\ is a coefficient; Nt is the current number of optimization of the 
criterion function, and P’3 is a random number in uniform distribution 
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Figure 12.11. Stepped changing of the criterion function 



in the interval [-tt/ 2, 7r/2j, n is the number of sign-events, Nj is the 
number of grade-events in each GIE, i.e. for every sign-event. 

The criterion function for formula (12.17) is the continuous learning 
error. The number Nt of optimizations, made before the learning process 
terminates, may be very large. The tan-operation is a consequence of 
the use of the Cauchy distribution for the learning error. Theoretically, 
this error is distributed according to the normal law, but application of 
the learning error distribution according to the Cauchy law allows us to 
halve time on computation of tabulated values. Otherwise, computation 
may take days and weeks. 

It was suggested in [7, 9] to teach non-success risk LP-model with a 
modification of formula (12.7) 

dPljr = Ki • {Nopt — Nt) • tan(i^ 3 ), r ~ 1, . . . , Nj; j — 1, . . . , n, 

(12.18) 



where Nopt is a given number of optimizations of the criterion function. 
New values of Plj> and Pjr found for F > Fmax are considered as opti- 
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mal and are used in the next Nt optimization. If the criterion function 
does not increase after a given number Nmc of optimization steps, then 
it is reduced by 2-4 units and the optimization is continued. The crite- 
rion function in the risk LP-model identification problem is integer and 
cannot exceed the total number of objects in the statistical data. The 
formula (12.18) turned out to be quite satisfactory, but the computation 
time was large (about 10 hours for the optimization session). 

In order to reduce the time of the “tangent operation” was excluded 
from formula (12.18). Thus, we obtain the expression [7,8]; 

dPljr = Ki {Nopt - Nt) Ks, r = l,...,iVj; j = l,...,n. (12.19) 

Though formulas (12.18) and (12.19) were applied earlier in [7,80] for op- 
timization, the optimization problem in identification of risk LP-models 
is still far from being resolved. This is evidenced by the following fact. 
In a session with Nopt = 245000 optimizations and almost constant op- 
timal increment dPljr, we obtained Fmax — 824 instead of Fmax — 810 
with the usual number of optimizations Nopt ~ 245. This forced us to 
perform special experiments; their results are presented below. 

For a random number in the interval [-1,+1], the absolute prob- 
ability increments dPljr are given in per cent (%) by multiplication by 
100. This is convenient, because accuracy of probabilities Pljr can be 
easily estimated. For example, the increment dPljr — 0.0005 expressed 
in per cent is 0.05% or the probability Pljr is computed with 0.05% 
accuracy. 

According to formula (12.9), the maximal amplitude of probabilities 
increments at the beginning of optimization is as follows: 

• Nopt- ( 12 . 20 ) 

At the end of optimization, the amplitude is equal to zero. Let the 
current amplitude of increments be API. There is an optimal interval 
domain for the increment amplitude API, its location and width OPT 
are unknown (fig. 12.12). For large API, the probability of increasing 
Fmax is small, but for small API there is a high probability that the 
local extremum is at the attained Fmax (see fig. 12.11). 

Optimization process (learning of risk LP-models) must be confined 
within the optimal domain OPT for a sufficiently long time. The dura- 
tion dNopt of being in the optimal domain OPT is as follows: 
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Figure 12.12. Number of optimizations dNopt against the increment amplitude API 

dNopt = {OPT ■ Nopt)/APl max (12.21) 

and depends on the number of optimizations Nopt and maximal incre- 
ment amplitude dPlmax- The larger the amplitude Nopt and the smaller 
the increment API-max, the greater the duration dNopt- Therefore, we 
investigate the influence of the following parameters of the learning for- 
mula (12.19) to the criterion function (accuracy of risk LP-models): 

• Number of optimizations Nopu 

• The minimal increment amplitude APlmin with which optimiza- 
tion is still possible; 

• The initial value of the criterion function Fbeg] 

• Choice of identical or different amplitudes API for different grade- 
events; 

• The maximal increment amplitude APlmax', 

• Distribution of risks of objects in statistical data. 

The question arises if the increment amplitudes API should be cho- 
sen identical or different for all grades? In other words, do the ampli- 
tudes APljr depend on the probabilities Pljv? In formulas (12.18) and 
(12.19) for learning logical-probabilistic risk models, the increment am- 
plitudes APlj-r are identical for all grade-events, irrespectively of their 
probabilities Pljr- The increments dPljr differ only due to random 
modelling of the coefficient K^. 
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12.4.2 Numerical experiments at optimization 

Computer-aided experiments for a logical-probabilistic credit risk model 
were performed. The structural credit risk LP-model in use has twenty 
sign-events (and a respective number of groups of incompatible events) 
and ninety four grade-events. The structural risk model of a type “unit” 
(fig. 11.1, a) is used. The logic and probabilistic function of credit risk 
are given by expressions (12.13), (12.14). The experiment was carried 
out with 1000 credits (the standard Western package of the credits) [76], 
of which 700 were “good” and 300 were “bad”. 

The identification of the risk P-model consists in determination of 
optimal probabilities Pjr, r — 1,2, Nj; j — 1, 2, . , . , n, for the grade- 
events. The risk of each credit is computed on each step of optimization 
of Pljr and r = 1,2, Nj] j = 1,2, ...,n. Comparing this 
risk with the admitted risk Pad, the object is attributed as “bad” or 
“good” [7-9]. We remind that the criterion function of the optimization 
problem is taken so as to maximize the number of the correctly classified 
credits (12.1). 

Choice of parameters Nopt, APlmin, Fbeg. Probabilities Plj> 
for the initial variant were taken without the last four digits in compar- 
ison with those for the optimal variant Fmax = 824 [81]. Therefore, the 
optimization began with Fi^^g = 690-760. That reduced the computation 
time. 

The computations were made for two maximal increment amplitudes: 
APlmax — 0.05 (5%) and APlmax — 0.1 (10%) and number of optimiza- 
tions Nopt equal to 150, 300, 500, 750, 1000, 2000, 3000, 4000, 5000, 6000, 
7000, 8000. 

Using Table 12.2 (Var. 2-21) and fig. 12.13, we make the conclusions: 

1) The criterion function Fmax (column 6 in table 12.2 and fig. 12.13) 
asymptotically increases with the number of optimization Nopu 

2) The minimum amplitude APlmin (column 9) is approximately 
equal to 0.0025 (0.25%). Optimization does not take place for less values 
of APlmin and the number of the last optimization N^nd (column 10) 
is less than the given number of optimizations Nopt- In the course of 
training, a range with a constant APlmin should be introduced in the 
law of variation of API. This increases the probability of obtaining a 
greater value of Fmax- 

3) The optimization process invariably worsens if the segment B-C 
(fig. 12.14) vanishes. 
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Table 12.2. Results of the choice of optimization parameters 



No 


Fopt 


Ki * 10^ 


APlmax 


Fbe.g 


F max 


dPc 


APlmin 


F end 


Formula 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


1 


2000 


1.0 


0.2 


776 


786 


0.204 


0.1987 


20 




2 


300 


1.65 


0.05 


756 


794 


0.197 


0.002 


289 


11.19 


3 


300 


3.3 


0.1 


712 


790 


0.221 


0.0043 


288 


11.19 


4 


750 


0.665 


0.05 


756 


802 


0.164 


0.0054 


669 


11.19 


5 


750 


1.33 


0.1 


692 


790 


0.205 


0.0131 


652 


11.19 


6 


1000 


0.5 


0.05 


750 


802 


0.187 


0.0035 


931 


11.19 


7 


1000 


1.0 


0.1 


708 


792 


0.217 


0.0158 


843 


11.19 


8 


2000 


2.5 


0.05 


776 


808 


0.159 


0.0075 


1702 


11.19 


9 


2000 


0.5 


0.1 


724 


798 


0.180 


0.0140 


1720 


11.19 


10 


3000 


0.16 


0.05 


748 


806 


0.186 


0.007 


2581 


11.19 


11 


3000 


0.33 


0.1 


708 


806 


0.186 


0.0050 


2849 


11.19 


12 


4000 


0.125 


0.05 


744 


812 


0.194 


0.0079 


3368 


11.19 


13 


4000 


0.25 


0.1 


740 


802 


0.212 


0.0086 


3656 


11.19 


14 


5000 


0.1 


0.05 


754 


806 


0.166 


0.0055 


4445 


11.19 


15 


5000 


0.2 


0.1 


738 


803 


0.158 


0.0040 


4801 


11.19 


16 


6000 


0.16 


0.1 


710 


810 


0.16 


0.006 


5610 


11.19 


17 


6000 


0.183 


0.109 


736 


1 810 


0.162 


0.0049 


5730 


11.19 


18 


7000 


0.07 


0.05 


764 


; 810 


0.209 


0.0041 


6430 


11.19 


19 


7000 


0.14 


0.1 


734 


810 


0.169 


0.0074 


6479 


11.19 


20 


8000 


0.062 


0.05 


764 


810 


0.175 


0.0098 


6425 


11.19 


21 


8000 


0.125 


0.1 


718 


814 


0.180 


0.0028 


7772 


i 11.19 


22 


12000 


0.075 


0.09 


772 


812 


0.174 


0.0025 


11754 


11.22 


23 


8000 


0.037 


0.03 


780 


820 


0.153 


0.0025 


7662 


11.22 


24 


8000 


0.087 


0.07 


744 


814 


0.173 


0.0025 


7801 


11.22 


25 


5000 


0.04 


0.0215 


812 


820 


0.146 


0.0025 


23 


11.27 


26 


5000 


0.004 


0.0025 


810 


824 


0.151 


0.0025 


34 


11.27 


27 


8000 


0.0002 


0.0025 


810 


826 


0.154 


0.0025 


678 


11.27 


28 


8000 


0.025 


0.0046 


806 


822 


0.160 


0.0070 


507 


11.27 


29 


8000 


0.03 


0.0057 


806 


822 


0.167 


0.0045 


1757 


11.27 



4) The initial value T),ec? (column 5) of the criterion function should 
not be reduced, because small values produce a small final value for 
Fmax (fig- 12.15) due to the unsatisfactory trajectory of the optimization 
process. In our case, we can take — 750 -h 760. 

Therefore, instead of (12.19), the risk LP-models can be taught by 
the formula: 



If API < APlmin, then dPljr = APlmin • 7^3, 

If API > APlmin, then dPljr = Ki • {Nopt - Nt) ■ K^. 



( 12 . 22 ) 





Identification of risk LP-models with GIE 247 




Figure 12.13. The function Fmax against of the number of optimizations Nopt 



AP, 




Figure 12.14. Graph of variation of the increment amplitude API 



Results of optimization by formula (12.22) for APlmin = 0.0025 (0.25%), 
different APl^ax = 0.098, 0.09, 0.03 (9.8%, 9%, 3%), a sufficiently 
large number of optimizations Nopt =5000-12000 and a high value of 
Fbeg = 745 are shown in Table 12.2 (Var. 22-24). Big values of Fmax=812- 
822 were obtained for all variants. 

Different increment amplitudes APlj^ for different grades. 

Note that the probabilities P\jr depend on the number of grades in GIE, 
on frequency of Wjr of grades in objects, and on contributions of grades 
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Figure 12.15. The criterion function Fmax against its initial value 



to recognition error. 

In formula (12.19) the increment amplitudes APljr are taken iden- 
tical for all grade-events, irrespectively of their probabilities Pljr. 

Let us modify this formula in such a way that the probability of each 
grade is taken into account 

dPljr = Ki • - Nt) • LCs • Pljr- (12.23) 

Here every grade has its own amplitude 

APljr = Ki - {Nopt - Nt) ■ Pljr (12.24) 

and formula (12,8) can be written as 

dPljr = APljr • Ks. (12.25) 

Let us also modify formula (12.9) as follows: 

dPljr - Ki - (Nopt - Nt) . ((1 - a) -f a . Pljr) ■ (12.26) 

where the coefficient a belongs to the interval [0, 1] . We have formula 
(12.19) for 0 = 0, formula (12.24) for o = 1 and all modifications for 
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intermediate values of a. 

Incorporating the constrains introduced for formula (12.10) into for- 
mula (12.22), we obtain the following expression for training the risk 
LP-model: 

If APIjr <C then dPljj- = APl-ijiin, 

If APljr > APlmin, then dPljr (12.27) 

= Ki • {Nopt - Nt) • ((1 - a) -f a • PI,,) • P 3 . 



The results of optimization by formula (12.27) for a = 1 {APlmax = 
2.15%, 0.25%, 0.45%, 0.57%) are given in Table 11.2 (Var. 25-29) and 
show that the criterion function takes big values =820-822 with a 
limited number of optimization Nend (column 10). At the first optimiza- 
tion, we obtain =806-810. The optimization process terminates at 
Nend =23-1750 rather than at the predefined number of optimizations 
Nopt =5000-8000 (column 6). It seems, that the number of optimizations 
Nopt can be essentially reduced. 

Extra experiments were carried out to verify this assumption. We 
took Nopt = 600, 450, 300, 150, 100, 50 and Ki = 0.00033, 0.00025, 
0.00015, 0.0001. The maximal increment amplitude APlmax was varied 
in the interval 0.5%-20% of Pl,>. Table 12.3 shows the values of Fmax 
and the difference between the maximal and minimal risks of objects 
in the statistics P^ax/APc. The results are good (Pmax=810-822) and 
confirm effectiveness of formulas (12.22), (12.10) and (12.27). 

We also studied the influence of the coefficient a to be optimization 
for a small number of optimizations Nopt — 160, K\ = 0.00015, and 
maximal increment amplitude APlmax equal to 0.0225 • Pl,>. 

The results shown in table 11.4 also confirm the effectiveness of for- 
mulas (12.22), (12.10) and (12.27). Indeed, the criterion function is 
equal to Fmax = 820 and 802 for a = 0 and a = 1 respectively. 

Amplitude APlmax and Global Extreme Fmax. Let us once 
again examine the choice of maximal amplitude APlmax for probability 
increment. The variation of Fmax with the amplitude APlmax~Ni - Nopt 
in the interval 0.5-20 % of Pl,> as listed in Table 12.3 show monotonic 
decreasing of Fmax in the amplitude APlmax- Fig- 12.16 shows the 
dynamics and optimization results for five variants with Aopt=2000. 

• Variant 1: APlmax = 0.05(5%), Fmax = 808 (Var. 8 in Tab. 12.2), 
training by (12.19); 
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Table 12.3. Values of Fmaxj^Pc. for small numbers of optimizations Nopt 



Number of 

optimizations, 

Nopt 


Ki - 0.00033 


Ki = 0.00033 


Ki - 0.00015 


Ki - 0.0001 


600 


798 / 0.248 


796 / 0.225 


810 / 0.180 


810 / 0.149 


450 


802 / 0.217 


804 / 0.187 


814 / 0.162 


819 / 0.161 


300 


810 / 0.146 


810 / 0.174 


816 / 0.147 


820 / 0.162 


225 


810 / 0.154 


811 / 0.152 


818 / 0.148 


821 / 0.146 


150 


816 / 0.145 


820 / 0.156 


822 / 0.148 


822 / 0.147 


100 


'818 / 0.146 


820 / 0.149 


820 / 0.151 


820 / 0.153 


50 


822 / 0.151 


820 / 0.146 


820 / 0.152 


820 / 0.148 




Figure 12.16. Dynamics of optimization as a function of the parameter APXmax 



Table 12. 4^ Values of F^ax for different values of a 



Value, a 


o 

o 


0.1 


0.2 


0.3 


0.4 


0.5 


0.6 


0.7 


0.8 


1.0 


Value, Fmax 


802 


800 


798 


804^ 


808 


810 


808| 


810 


818 


820 
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Figure 12.17. Connection of Fmax and APc 

• Variant 2: APlmax — 0.1(10%), Fmax = 798 (Var. 9 in Tab. 11.2), 
training by (12.19); 

• Variant 3; APlmax — 0.05(5%), Fmax — 820, formula (12.27) with 
a = 1; 

• Variant 4: APlmax = 0.1(10%), Fmax = 804, formula (12.27) with 
a ~ 1; 

• Variant 5: APlmax ~ 0.2(20%), Fmax ~ 786 (Var. 1 in Table 12.2), 
formula (12.27). 

Despite application of the effective formula (12.27) for a = 1 the 
teaching dynamics and results for variants 4 and 5 with high APlmax, 
are bad. Their criterion functions are equal to 786 and 804, respectively. 
The optimization process terminates rather quickly {Nend = 1608 and 
Nend — 20). The criterion function do not increase in other optimiza- 
tions of Nopt — Nend- This example shows that the amplitude APlmax 
should not be taken greater than 0.02-0.05 (2-5%). 

The global extreme Fmax is determined from the graph of variation 
of Fmax foi" the function of difference between the maximal and minimal 
object risks in statistics APc (fig. 12.17), This graph, according to [7], 
has an extremum. The graph plotted for different variants (table 12.2 
and table 12.3) shows that solutions are robust (stable) if the scatter 
of values of APc near the global extremum Fmax is small. 

Discussion of results. The investigations results are in the fol- 
lowing: 




252 E. D. Solojentsev 



1. A method for determining the global extremum of the criterion func- 
tion in identifying risk LP-models is suggested. It terns out to be 
effective in solving multiparametric multicriterion optimization prob- 
lems with integer criterion function within reasonable computation 
time. 

2. The random number in the learning formula should be generated 
in the interval [-1,+!]. Then the absolute increments dPljr in per 
cent (%) give estimate of the accuracy of probabilities Plj>- 

3. The method is based on the use the following behavior of variation of 
the criterion function: 

• The criterion function asymptotically increases with the number 
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Figure 12.18. Credit risks, classification of credits and price for risk 
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optimizations Nopt‘, 

• The minimal admissible amplitude APlmin of increments of prob- 
abilities Pljr is determined by two or three computations: for the 
values of APlmin less than 0.25%, optimization does not go. 

• The initial criterion function Fheg should not be set too small 
because this invariably yields, small final values for F^ax due to 
the unsatisfactory optimization trajectory; 

• The maximal amplitude of increments of the probabilities APlmax 
should not be taken greater than 0.02-0.05 (2-5%), since training 
dynamics worsens and the criterion function Fmax decreases. 

4. New effective learning formulas (12.22), (12.10), and (12.27), designed 
for determining the global extremum of Fmaxi use different increment 
amplitudes for probabilities of different grade-events. 

5. The determination of the global extremum of the criterion function 
should be verified with the help of the graph of variation of Fmax in 
the function of the difference APc between the maximal and minimal 
risks of objects in statistics. The function Fmax fias an extremum at 
a certain value of APc. 



12.5 Accuracy of the risk LP-model 

We carried out the accuracy estimation of the risk LP-model for the 
credit risk. The structural risk LP-model of a type “unit” (fig. 11.1, a) 
is used. The credit risk L-model in disjunctive normal form is presented 
by formula (12.6), and the credit risk P-model is presented by formula 
(12.7). The failure occurs when any one, two, . . . , or all initiating events 
take place. The model has 20 sign-events (corresponding to GIE) and 
96 event-grades. The comparison of different risk evaluation methods 
should be based on the same indicators of accuracy of object classifica- 
tion and carried out on the same western statistical data [76]. We shall 
illustrate such a comparison by an example. The comparison of differ- 
ent methods of risk estimation is carried out by accuracy indicators of 
classification objects Em, Eg^E^. 

The accuracy of a risk LP-model is tested on standard statistical 
data including N— 1000 credits of physical persons, of which Ng = 700 
ere good and — 300 are bad. This data was used to evaluate accuracy 
of nearly 10 different classification method [76] based on linear (LDA) 
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and quadratic (QDA) discriminant analysis, cluster analysis (CARD) 
and neuron networks (NN). 

During the training of the risk LP-model we use the training sample 
of 700 objects (500 good and 200 bad objects) and the testing sample 
of 300 objects (200 good and 100 bad objects). For different random 
ways of formation of the training and testing samples, the distinctions 
in accuracy of object classification on these samples do not exceed plus 
or minus one per cent, that confirms high adequacy of the risk LP-model. 
The computation are made for given number of good credits Ngc — 610 
and bad credits A'bc = 390, but in statistical data we have Ng — 700 and 
Ni, — 300. This is done because the losses by mistake in classification 
of bad credit is larger than those due to mistake in classification of 
good credit. The ratio of losses is equal to Egi, = 3. Parameters of the 
risk LP-model after the training are as follows: Fmaa:=826; Ngs—568] 
A"bs=258; Prnm ==0.230 (the minimal risk among the credits); Phiox— 0.379 
(the maximal risk among the credits); Pad=0.306. 

In credit classification the credit risk LP-model has essentially smaller 
mistakes £'^=0.174; £^=0.189; £?,— 0.143, than the known techniques, 
which give £^aa;=750-720; £rJ^=0.25-0.28. 

The results of accuracy comparison of different methods on the same 
statistical data (Table 12.5) show that the risk LP-model is almost 2 
times more accurate than other classification methods. The introduction 
of the price of credit risk can be justified if we build the graph of risks 
for 1000 credits before and after sorting objects by risks (fig. 12.18). 
Approximately 15% of credits are very good, whilst 15% of credits are 
very bad, which naturally makes us believe that the price of credit should 
depend on its risk. 

12.6 Robustness of the risk LP-model 

Different risk models do different classification of the credits to good and 
bad ones. One of two different risk models may classify a credit as good, 
while an other may classify it as bad. A stability (robust) estimate for 
the risk P-model for classification was carried out, using the data and 
results from above given examples, by the method of pairwise compar- 
ison of different variants of the solution in the credit classification. In 
the variants, difference of criterion functions Fjnax reach 10 units. The 
comparison was based on the number of inconsistencies of the estimates 
of good n^, bad rib and in unrecognized rigb credits (Table 12.6). 
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Table 12.5. Parameters of classification accuracy of credits by different methods 



Used method 


Error of 
classification 
of bad objects, 
Eb 


Error of 
classification 
of good objects, 

E, 


The average 
error, E^ 


LDA Resubtitution 


0.26 


0.279 


0.273 


LDA Leaving-one-out 


0.287 


0.291 


0.29 


QDA Resubtitution (QDA) 


0.183 


0.283 


0.253 


QDA Leaving-one-out 


0.283 


0.34 


0.323 


CART 


0.273 


0.289 


0.285 


Neuron networks 1 (NN) 


0.38 


:0.24 


;0.282 


Neuron networks 2 (NN) 


:0.24 


0.312 


0.29 


LP-model without GIE (Var. 1) 


0.167 


0.201 


0.191 


LP-model with GIE (Var. 2) 


0.1433 


0.190 


0.176 


LP-model with GIE and after 
structure identification (Var. 3) 


0.126 


0.174 


0.155 



Table 12.6. Pairwise comparison of stability of different models 



With GIE 


Without GIE 


Variants 


riq 


Ub 


rigb 


Variants 


Uq 


rtb 


rigb 


1 and 2 


9 


9 


18 


1 and 2 


80 


80 


160 


2 and 3 


9 


9 


18 


1 and 3 


45 


45 


90 


1 and 3 


8 


8 


16 


2 and 3 


68 


68 


136 










1 and 4 


60 


60 


o 

CM 

T — ! 










2 and 4 


76 


76 


152 










3 and 4 


50 


50^ 


100 



During the training of the risk P-model with GIE {Ngc — 610; N\,c — 
390; Nind — 76) three different solutions are obtained. The risk LP- 
model with GIE on these three solutions has the stability indicator 
Ksi — (18 + 18 + 16)/(1000 • 3) = 0.018, During the training of the 
risk P-model without GIE (Ngc = 610; — 390; N^nd — 96) four dif- 

ferent solutions are obtained. The risk LP-model without GIE on these 
four solutions has the stability indicator Ks 2 ~ (160 + 90 + 136 + 120 + 
152 + 100)/(1000 • 6) = 0.128. The ratio of the stability indicator for 
the risk P-models with GIE and for that without GIE is as follows: 
Ks2/K,i -0.128/0.018-7.1. 

The obtained result can be generalized to the instability question for 
risk models based on neuron networks, where a large number of weights 
of net links is introduced without any restrictions. Non-robustness of 
the methods of the risk estimation based on neuron networks has been 
marked in numerous papers [76]. 






Chapter 13 



RISK ANALYSIS IN SYSTEMS WITH GIE 



The analysis of risk is carried out by algorithmic numerical computation 
on PC; this allows us us to determine characteristics of system risk and 
characteristics of each element risk. The analysis of efficiency of each 
sign is done out on the basis of the analysis of efficiency of its grades, 
which constitute group of incompatible events. Some signs of risk object 
have grades constructed on intervals of sign values. For example, in the 
problem of credit risk as the signs with grades we can name the sum 
of the credit, duration of the credit, age of the client, etc. For such 
signs with continuous value it is possible to set the problem of optimal 
division of the sign value area into intervals of different optimal length 
with the number of interval corresponding to the number of sign grades. 
Similarly, the problem of optimal choice of grades number for a sign with 
discrete value by merging or splitting separate grades . 

The technique of the risk analysis should be transparent and pro- 
vide calculation of the contributions of sign-events and grade-events in 
risk of each object, in the mean risk of object set and in accuracy of 
the risk model. It is important for management of risk. For various 
purposes of modelling and estimation of risk it is necessary to develop 
different methods of the risk analysis, namely statistical, combinatorial 
and logic-probabilistic methods of the risk analysis. We shall consider 
these methods of analysis [8,82]. 



13.1 Statistical risk analysis 

The statistical analysis of risk (S-model of risk) is necessary for calcu- 
lation at the first, but rather good approximation of the grade-events 
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probabilities for each sign-event by the statistical data. It is necessary 
for the beginning of training process of the risk LP-model. 

By using the table “Objects and signs” it is possible to determine 
the number NSjr of objects with the given grade, the number NSOjr of 
bad objects with the grade; NSljr is the number of good objects with 
the grade. Then the probabilities of event-grades Pljr in GIE are equal 
to 



PSljr = NSOjr/NSjr. (13.1) 

It is to note that the obtained probabilities of grade-events, when being 
substituted into the risk LP-model without any optimization, give higher 
value of the criterion function Fmax = 776, than other known risk models 
after optimization (Gnaa: =725-750), 



13.2 Combinatorial risk analysis 

The risk combinatorial analysis explains the high accuracy of the risk 
LP-models. In works [7-9] it is shown that the risk LP-models trained 
by methods of parametrical identification on the statistical data, have 
almost two times higher accuracy and seven times larger robustness in 
classification of objects, than known methods of classification on the 
basis of the discriminant analysis and neuron networks. 

However, explanation of high accuracy of the risk LP-model risk by 
its logic structure do not satisfies all experts. Really, the common sense 
of the risk model, which states that failure occurs, if there is any one, 
any two, or all sign-events, requires other confirmations. 

The researches of the risk LP-model with one more sign-event having 
only two grades, the same as those of the final event, have shown 100% 
recognition of objects [7]. Each grade of such sign is projected to grades 
“1” or “0” of the final event (success or failure). If the sign has a few 
grades, theoretically a part of grades in GIE should project to “1”, and 
rest of grades to “0” . These ideas form the basis of the risk combinatorial 
analysis . 

Let us describe formulation of the combinatorial analysis problem 
by an example. Let the grades r — 0,1, 2, 3, 4 of the sign j — 12 be 
investigated. The scheme of calculation for grade j — 0, having relative 
frequency W \2 o, is as follows: 

We consider all objects with the grade 0 as bad, that is this grade is 
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projected to value y = 0 of the failure sign. We get estimations A^COO 
(the number of correct bad objects) and NCOl (the number of incorrect 
bad objects); 

We consider all objects with grade 1 as good, that is this grade is 
projected to F = 1. We get estimations NCll (number of correct good 
objects) and A^CIO (number of incorrect good objects). 

In the combinatorial analysis for each grade only two types of such 
objects NCOO, NCOl or NCIO, NCll are calculated, that is, the ideal 
participation of the grade in classification is determined in view of its 
frequency Wjr in GIE. 

Let us write out possible combinations for the first branch from 15 
variants, in which numbers before the hyphen denote grades for the 
good objects, and numbers after the hyphen specify grades for the bad 
objects: 

0- 1234; 01-234; 12-034; 23-014; 34-012; 

1- 0134; 02-134; 13-024; 24-013; 

2- 0124; 03 124; 14-023; 

3- 0123; 04-123; 

4- 0123 

Let us consider the combination: 04-123; A^=1000; A^^,=300; Ng=700. 
For the first branch we have: 

NC^f = 250; iVCOO = 150; iVCOl = 100; 

= 750; NCn = 550; iVClO = 200; 

ECm = {N-(NC00+NCn))/N = (1000-(150+550))/1000 = 0.3; 
For the second branch we have: 

= 250; NCn = 100; iVClO = 150; 

NC'lg = 750; NCOO = 200; NCOl = 550; 

ECm= (N-(NC00+NC11))/N = (1000-(100 + 200)/1000 = 0,7; 
Thus, in the problem of combinatorial analysis can be determined 
the following tasks can be determined: 

• To calculate for each grade in GIE the numbers NCOO, NCOl, NCIO, 
NCll] 

• To calculate the numbers A^COO, A^COl, A^CIO, A/'C'll for all possible 
combinations of grade in GIE on the basis of the obtained results; 

• To determine variant with optimum combination of grades and to fix 
its parameters of classification accuracy. 

We carried out numerical investigation in the field of the combi- 
natoric analysis. There were used “standard” statistical data for 1000 
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credits, from which 700 were “good” and 300 were “bad”. The structural 
LP-model of credit risk for the physical persons is given in fig. 12.1, a. 
It has 20 sign-events (accordingly, GIE) and 94 grade-events. We used 
the risk L-function (11.9) and the risk P-function (11.10). 

The following variants of C-model were built: with the number of 
good objects Ngc — 610, with Ngc = 700 and with the maximal value 
of the criterion function The results of calculations are given in 

Table 13.1. For each from 20 signs for optimal division of their grades 
into good and bad we calculated the following extra parameters: 

ECO is an error in classification of bad objects; 

ECl is an error in classification of good objects; 

ECm is an error in classification of objects. 

For the sign 0 effective combinations belong to the range 
ECm =0.304-0.696. Two most effective combinations have ECm — 
0.304 and 0.335, that is, differ not much. For the sign 8 efficiency of 
combinations are in the range ECm =0.310-0.690. Two most effective 
combinations have ECm = 0.310 and 0.342, that, differ not much too. 

Let us construct one more table based on the research results (Table 
13.2), where for each sign we show: the number of grades Nj^ value 
of the average error of classification ECm^ the ratio ECmax/ECmin for 
different accepted number of good objects Ngc, and the decrement of 
the criterion function dFj, when this sign is eliminated. 

We consider in more details the results of calculations for the signs 0 
and 8, having four grades. We write in Table 13.3 the values of efficiency 
of each grade of the sign 0 at its projection to 0 or 1 of the final event. 

We present the results of Table 13.3 for the optimal combination 
with ECm — 0.304 (1,2,3 are the good grades; 0 is the bad grade ) in 
the graph form (fig. 13.1). The normalized probabilities of grade-events 
in GIF is as follows: 



3 

Plor = ECr I ECr (13.2) 

r=0 



After calculations we get: 

P100 = 0.151; P101 = 0.319; P102 = 0.331; P103 = 0.198. 

These probabilities should be used as initial approximation when 
solving the problem of identification. 

If, for example, as optimum we fix the combination with ECm — 
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Table 13.1. Results of the combinatorial analysis 



Signs 


Ngc = 610 


1 Ngc = 700 


1 Ngc for Fmaxabs 


Combi- 

nations 


Em 


El 


Eo 


Combi- 

nations 


Em 


El 


Eq 


Combi- 

nations 


Em 


El 


EO 


0 


+0,1,2 

-3 


.60 


.5 


.84 


+ 1,2,3 
-0 


.30 


.2 


.55 


+ 1,2,3 
-0 


.30 


.20 


.55 


1 


+ 1,2, 3,4 
+6,7,9 
-0,5,8 


.49 


.42 


.67 


+0, 2,3,4 
5, 6, 8, 9 
-1,7 


.42 


.30 


.69 


+0,1, 2, 3, 
+4, 5, 6, 8 
-7,9 


.29 


.04 


.87 


2 


+2,3 

-0,1,4 


.47 


.4 


.65 


+0,1, 2, 3 

-4 


.49 


.35 


.83 


+1,2,3 

-0,5 


.28 


.05 


.82 


3 


+1,2, 3,4 
+5,7,10 
-0, 6,8,9 


.4 


.35 


.51 


+0,1,3, 4 
+6,8,10 
-2,5, 7,9 


.40 


.28 


.66 


+0, 1,2,3, 
+4,5,6, 8, 9 
-10 


.30 


.0 


1.0 


4 


+0, 1,2,4 
+5,8,9 
-3,6,7 


.45 


.38 


.60 


+ 1,3, 4,6 
+7,8 
-0,2,5, 9 


.43 


.31 


.72 


+0,1, 2, 3, 
+4,5 
-6,7, 8,9 


.29 


.01 


.93 


5 


+0 

-1,2, 3, 4 


.53 


.45 


.72 


+0,1 

-2,3,4 


.5 


.4 


.83 


+0,2, 3,4 
-1 


.33 


.1 


.88 


6 


+1,2,3 

-0,2 


.45 


.39 


.57 


+ 1,2,3 
-0,4 


.44 


.32 


.71 


+ 1,2, 3,4 
-0 


.32 


.06 


.92 


7 


+0,3 

-1,2 


.47 


.40 


.64 


+1,3 

-0,2 


.43 


.31 


.74 


+0,1,3 

-2 


.37 


.16 


.85 


8 


+0,2 

-1,3 


.43 


.38 


.55 


+0,2,3 

-1 


.39 


.28 


.64 


+1,2,3 

-0 


.31 


.04 


.93 


9 


+0 

-1,2 


.34 


.09 


.91 


+0 

-1,2 


.34 


.09 


.91 


+0,2 

-1 


.30 


.030 


.95 


10 


+0,1,2 
; -3 


.46 


.41 


.58 


+0,2,3 

-1 


.41 


.30 


.67 


+ 1,2,3 
-0 


.36 


.13 


.9 


11 


: +0,2 
-1,3 


.41 


.35 


.54 


+ 1,2,3 
-0 


.46 


.32 


.80 


+0,1,2 

-4 


.3 


.12 


.77 


12 


+1,3,4 

-0,2 


.44 


.39 


.58 


+0,1 

-2,3,4 


.44 


.31 


.74 


+0, 1,2,3 
-4 


.32 


.03 


.98 


13 


+2 

-0,1 


.33 


M6 


.74 


+2 

-0,1 


.33 


+6 


.75 


+0,3 

-1 


.31 


.04 


.936 


14 


+ 1 
-0,2 


.36 


.25 


.62 


+ 1 
-0,2 


.36 


.25 


.62 


+0,1 

-2 


.32 


.09 


.85 


15 


+0 

-1,2,3 


.47 


.38 


.66 


+0,2,3 

-1 


.45 


.34 


.69 


+0,1,2 

-3 


.30 


.01 


.99 


16 


+2 

-0,1,3 


.44 


.36 


.62 


+0,2 

-1,3 


.43 


.34 


.64 


+1,2,3 

-0 


.31 


.02 


.97 


17 


+0 

-1 


.36 


.15 


.85 


+0 

-1 


.36 


.15 


.84 


+0 

-1 


.36 


.15 


.85 


18 


+0 

-1 


.47 


.41 


.62 


+0 

-1 


.47 


.41 


.62 


+0 

-1 


.48 


.41 


.62 


■ 


+0 

-1 


.33 


.05 


.98 


+0 

-1 


.33 


.05 


.98 


+0 

-1 


.33 


.05 


.98 
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Figure 13.1. To the scheme of probability calculation of grade-events for the 
optimum combination of grades 



0.339 (1, 3 are good grades; 0,2 are bad grades), we get graph shown 
in fig, 13.2. The normalized probabilities of grade-events in GIE are as 
follows: PlOO = 0.181; PlOl = 0.382; P102 = 0.199; P103 = 0.237. 



Table 13.2. Influence of the number of grades to the recognition error 



Signs, 

j 


A^3c=610 

ECm 


Ngc^lQO 

ECm 


pabs 

max 

ECm 


Number 
of grades, Nj 


ECmax 

ECmin 


dFj 


0 


0.602 


0.304 


0.304 


4 


1.95 


- 64 


1 


0.496 


0.419 


0.290 


10 


1.71 


- 27 


2 


0.476 


0.493 


0.283 


5 


1.74 


- 18 


3 


0.398 


0.400 


0.301 


11 


1.33 


- 26 


4 


0.452 


0.430 


0.288 


10 


1.57 


- 20 


5 


0.531 


0.496 


0.335 


5 


1.59 


- 20 


6 


0.447 


0.441 


0.316 


5 


1.41 


-6 


7 


0.474 


0.435 


0.367 


4 


1.29 


-5 


8 


0.434 


0.392 


0.310 


4 


1.4 


-11 


9 


0.337 


0.337 


0.305 


3 


1.11 


-10 


10 


0.465 


0.414 : 


0.358 


4 


1.3 


0 


11 


0.41 


0.462 ; 


0.32 


4 


1.44 


0 


12 


0.445 


0.443 


0.316 


5 


1.41 


-16 


13 


0.334 


0.334 


0.309 


3 


1.08 


-2 


14 


0.359 


0.359 


0.32 


3 


1.12 


-8 


15 


0.467 


0.449 


0.302 


4 


1.54 


-2 


16 


0.442 


0.434 


0.308 


4 


1.43 


0 


17 


0.363 


0.363 


0.363 


2 


1.0 


0 


18 


0.478 


0.478 


0.478 


2 


1.0 


0 


19 


0.329 


0.329 


0.329 


2 


1.0 


-2 
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Figure 13.2. To the scheme of probability calculation of grade-events in GIE for any 

combination of grades 

Table 13.3. Individual efficiency of grade-events 



Grades 


0 


1 


2 


3 


Good 


0.696 


0.641 


0.665 


0.398 


Bad 


0.304 


0.359i 

1 


0.335 


0.602 



As a result of the model researches by the combinatorial analysis 

(C-analysis) we obtained the following basic outcomes: 

• The C-analysis allows us (unlike the S-analysis of risk) to estimate 
the importance of sign-events and grade-events without solution of 
the difficult problem of optimization. 

• The C-analysis allows us to estimate the average recognition error of 
each sign. These average errors for diflPerent signs can differ almost 
in two times. Any of signs cannot provide the average recognition 
error, obtained by all signs (ECm = 0.174 on the risk LP-model and 
ECm — 0.3 on the statistical data). 

• The signs with a small number of grades in them (Nj = 2,3) practi- 
cally do not change the average classification error when the calculated 
number of good objects Ngc changes. The signs with the number of 
grades Nj > 4 substantially change the average error of object classifi- 
cation when Ngc changes. At the same number of grades in signs their 
influence to the classification error depends on frequencies of grades 
Wjr or, which is the same, from lengths of intervals, on which the 
grades are constructed. 

• Large number of grades in a sign is not only the measure of error 
in the objects recognition. The error also depends on frequencies of 
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grades Wjr of signs or on lengths of intervals, on which the grades are 
constructed. 

• Large number of grades in a sign leads to “saturation” of recognition 
error, i.e. further increasing the number of grades does not decrease 
the error of objects recognition. 



13.3 Logical-probabilistic risk analysis 

Let the risk P-model be trained and the probabilities of grade-events 
be known. In order to carry out analysis, we determine contributions of 
sign-events and grade-events in the object risk and mean risk of a set of 
objects, as well as to the accuracy of the risk LP-model. Using ideas of 
works [2,8,83], this task can be readily computerized by calculating the 
differences between the values of the above mentioned characteristics in 
the optimal mode and those obtained (| ) for the zero probabilities of 
the grade-events . The contribution of a sign (all grades of the sign) to 
the risk of the object i is as follows [8,82]: 



dP, - P{i) - P{i)\Pj = 0; i = 1, 2, . . . , 71. (13.3) 

The contribution of a sign to the mean risk Pm of the set of objects is 
given by the formula 



dPjm — Pjm — 0, J — 1, 2, . . . , 77. (13.4) 

The contributions of grades to the mean risk Pm of the set of objects is 
as follows: 

dPjrm — P jm ~ ^ 3 m\P jr — 0, J* = 1, 2, . . . , 77; T = 1, 2, . . . , Nj. (13.5) 
The contribution of a sign to the criterion function Fmax is as follows: 
dPj = Fmax - F\Pj = 0, j 1,2, ..., 77 . (13.6) 

For the contributions of grades to the criterion function Fmax we have: 
dPj = Fmax - F\Pj = 0, j = 1, 2, . . . , 77 . (13.7) 
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We note that the calculation of the contributions of the grade-events to 
the mean risk and the criterion function {dPjrm and dFjr) is incorrect 
because it is not known how to correct the relative frequencies of other 
grades Wjr in GIE if one of them is set to zero. Therefore, by analogy 
with (12.2), instead of the contributions dFjr one should calculate the 
errors of object classification for each grade-event: 

^j'f'9 ~ i^jrg ~ ^jrgs) / ^ jrg\ ^jrb ~ {l^jrb ~~ ^ jrhs) / ^ jrb's 

Ejrm — i^jr ^jrs) /^jri (13.8) 

where the Njrg, Nj^b, Njr are the numbers of “good”, “bad” and all ob- 
jects with grade r, respectively, and Njrgs, ^jrbs^ and Nj^s are, respec- 
tively, the numbers of objects with the grade r and correct classification. 

Calculation of the above contributions of the sign-events and grade- 
events underlies structural identification of the risk LP-model. The lat- 
ter implies varying the L-function, and variation of the number of the 
signs and grades in the signs, which enables one to tackle the important 
applications of risk control. The performance of the logical-probabilistic 
analysis of the risk will be in details discussed in Section 14 by an ex- 
ample of the bank credit activity analysis. 




Chapter 14 



SOFTWARE FOR RISK ANALYSIS AND 
MANAGEMENT 



In the present chapter we shall consider intellectual Work Station and 
Software for management of the safety of CS. It was indicated already, 
that the problems of safety and risk are characterized by extreme com- 
puting complexity. So, to speak about their solution is only possible in 
presence of program means. These means are not standard and cannot 
be joined in packages, such as MATLAB, etc. 



14.1 Intellectual Work Station 
for safety management 

The necessity of a new approach to automation of design, tests and 
maintenance of safe operation of CS is caused by the fact that computer 
aided design (CAD) systems are ineffective [41]. They solve utilitarian 
problems: calculations are carried out, design drawings and technologi- 
cal processes are prepared. However, there are no means for the senior 
staff of the design office directed to safety maintenance of the created CS. 
Possible ways and methods of the practical solution of these problems 
should be considered in a context of complex automation, for example, of 
machine-building enterprize, including (fig. 14.1) the automated design 
office, automated manufacture and automated testing benches. 

The automated design office includes: software tools (local network 
of computers), technology of intensive development of objects and orga- 
nizational maintenance. In its turn the technology of intensive develop- 
ment of objects is presented as an intellectual integrated CAD systems. 
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Figure 14.1. CADS with intellectual AWS 

This means that in the CAD system at the design stage the problems of 
debugging and operational tests, monitoring and diagnosing, modelling 
and analysis of risk, management of safe operation are solved too [41,42]. 
It is suggested to equip the integrated CAD system by the certain set 
of problem-oriented automated Work Stations on the base of computers 
with intellectual Software. 

Such integrated CAD system, along with the Work Station for cal- 
culation, drawings and making technological processes, includes also the 
following intellectual Work Stations for : 

• debugging tests; 

• operational tests and estimation; 

• monitoring; 

• logic and probabilistic modelling and analysis of risk; 

• management of safe functioning. 

The problems of development of the above mentioned intellectual 
Work Stations include: 

• Development of technology of the Work Station as a set of procedures 
and operations; 
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• Development of a Data Base (DB); 

• Development of a Knowledge Base (KB); 

• Development of means for support of models (graphical, logic ones, 
etc.). 

If we do translucence by ’’floodlight” the automated manufacture 
and automated testing benches, then we see the same intellectual Work 
Stations and problems. 

Let us give engineering interpretation of knowledge of the intellec- 
tual Work Station. The concept of knowledge of the intellectual Work 
Station is usually related to the documents, models and technology [41]. 
For example, in development of the intellectual Work Station for debug- 
ging tests the engineering interpretation of knowledge is used (shown in 
fig. 14.2). Among the mentioned components of the intellectual Work 
Station the leading position belongs to the technology, which is built 
on the basis of experience of experts and achievements in information 
technologies. The technology defines the requirements to toolkit and 
work organization. It is supported by appropriate program-methodical 
means and provides the disciplining and organizing foundation. It is 
also one of the most valuable component knowledge, since it is invariant 
to different objects. 

To the basis of technology of the intellectual Work Station, invariant 




sheets making 



Figure 14.2. Engineering interpretation of knowledge of lAWS 
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for different objects, it is necessary to put any comprehensive ideas, 
which give a direction and common philosophical approach. For this, as 
it was marked earlier in Chapter 3, we can use the following principles of: 

• management of complex object, 

• knowledge management, 

• recognition images, 

• training, 

• structural design. 

Consider development of technology of intellectual Work Station, for 
example for planning and the realization of debugging tests of machines 
and Man-Machine-Environment systems. All the above mentioned prin- 
ciples are used in the development, but the leading role belongs to the 
scheme of management of complex object with movement along a chosen 
trajectory and correction of deviation from the way and the scheme of 
knowledge as the logically closed sequence of procedures. In technology 
of this intellectual Work Station the following procedures are distigu- 
ished: 

• forecasting of debugging process; 

• technical and economic modelling of debugging process; 

• planning of debugging process; 

• decision making during tests; 

• processing of test protocols and improving models. 

In their turn, the procedures of the intellectual Work Station consist 
of elementary operations. More than 100 operations can be named in 
total. Approximately one third of operations carry out computations on 
models, approximately one third of operations deal with documents; and 
approximately one third of operations are related to decision making in 
conditions of uncertainty with use productive rules “if-then” and “on 
analogy”, formulated on a basis of judgments of experts. 

14.2 Software for identification and analysis of 
risk LP-models with GIE 

The Software for identification and analysis of risk LP-models (SW for 
“LP-estimation of risk” ) is the so-called “know-how” . It uses the math- 
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ematical risk LP-theory with groups of incompatible events. The LP- 
model of credit risk of physical persons has shown almost two times 
higher accuracy and seven times higher robustness in classification of 
credits to “good” and “bad” than other used methods (see Tables 12,4 
and 12.5). The decrease of risk almost to half allows us to reduce losses 
of a bank and essentially to lower the rate for the credit, to attract more 
clients and to raise competitiveness of the bank. 

Functions of SW “Risk LP- estimation”. The SW provides the solu- 
tion of the whole complex of new important problems for estimation and 
analysis of risk. For example for credit risk, three groups of problems 
are distinguished [84]: 

1. Determination of the credit risk 

1) Estimation of the credit risk; 

2) Classification of the credit (“good” or “bad”); 

3) Determination of the price for risk of the credit; 

4) Analysis of the credit risk; 

2. Analysis of the credit activity of bank 

5) Determination of the contributions of signs (characteristics) and of 
sign grades of a credit in the average credit risk of bank; 

6) Determination of the contributions of signs (characteristics) and of 
signs grades of a credit in accuracy of classification of the credits; 

7) Optimization of number of signs and grades, splitting into intervals 
(sum and period of the credit, age of clients) for higher of accuracy of 
classification of the credits; 

3. Identification and estimation of quality of risk LP-models 

8) Statistical analysis of the risk model; 

9) Combinatorial analysis of the risk model; 

10) Probability estimation of grade-events and the admitted risk; 

11) Estimation of accuracy of the risk LP-model; 

12) Estimation of robustness of the risk LP-model; 

13) Choice of the ratio of the incorrectly classified bad and good credits. 

The users of SW “LP-estimation of risk”. Any bank in any 
country can use the given SW. For a specific bank it is only necessary 
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to train the risk LP-model on the statistical data. In the absence of 
statistics (the least necessary number of the credits in statistics is equal 
to 400) it is necessary to use statistics on the an akin bank. The SW 
“LP-estimation of risk” can be easily adapted for solving risk problems 
in other data domains — for example, in business for estimation and 
analysis of risk of: 

• Credits of juridical persons; 

• Ruin of banks: 

• Swindles; 

• Bribes; 

• Insurance of life; 

• Buying-selling in tasks of the technical analysis, etc. 

The description of variables of classes OBJECT, SIGN, GRADE. 
Object-oriented Software for identification and analysis of risk LP-models 
with GIE is written on Java and Visual C++ following the above stated 
technique (Chapter 11). Let us present appropriate descriptions of 
classes and variables. As the basic class-object we choose “sign- event ” . 
Such decision allows us to use this Software for risk LP-models: 

• With a different number of sign-events; 

• With a different number of grade-events in each sign-event; 

• For different data domains of risk (business, engineering, insurance); 

• For models of risk of different logic complexity. 

Let us describe variables of classes OBJECT, SIGN, GRADE of the 
object-oriented program in the order of their subordination. 

Variables for the OBJECT class, common for classes SIGN and 
GRADE: 

5[V][n] are statistical data (file, table “Objects and signs”); 
n is a number of signs; 

TV is a number of objects; 

NSO is the number of bad objects in the statistical data; 

NSl is the number of good objects in statistic data; 
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ESm = NSO/N is the average error in classification of objects. 

YL[N] is the array of final estimations of the non-success of 
objects; 

NLO is the number of bad objects by L-model; 

NLl is the number of good objects by L-model; 

Pad is the admitted risk; 

NLOO is the number of correctly recognized bad objects; 

NLll is the number of correctly recognized good objects; 

NLOl is the number of incorrectly recognized bad objects; 
NLIQ is the number of incorrectly recognized good objects; 
Fmax is the common number of correctly recognized objects; 
ELm is the average error in classification of objects; 

ELO is the average error in classification of bad objects; 

ELI is the average error in classification of good objects. 

Variables for the SIGN class: 

Nj is a number of grades in GIE; 

Kj is the factor of transition from Pljr to Pjr in GIE; 

PLm, PLlm are the average probabilities for Pljr and Pjr in 
GIE; 

Variables for the GRADE class: 

Tv" (SO are numbers of objects with the given grade; 

A^50[] are numbers of bad objects with the grade by statistics; 
NS1[] are numbers of good objects with the grade by statistics; 
A^L0[] are numbers of bad objects with the grade by model; 
NL1[] are numbers of good objects with the grade by model; 

A^L00[] are numbers of correct bad objects with the grade by 
model; 

A^L01[] are numbers of incorrect bad objects with the grade; 
A^L10[] are numbers of incorrect good objects with the grade; 




274 E.D.Solojentsev 



Table 14-1. Object-oriented programming for risk LP-models in Java 



Models 


Variables 


S-model: 

L-model: 

C-model: 


Variables for the class “Set of risk objects” 

DS[N][n], N, n, PSm, YS[N], NSO, NSl, ESm; 

PL[], Pad, dPL, PLm, YL[N], NLO, NLl, NLOO, NLOl, 
NLIO, NLll, Fmax, ELI, ELO, ELm; 

ECl, ECO, ECm 


S-model: 

L-model: 

C-model: 


Variables for the classes “Sign-events”: 1,2,. . . ,n 
Nj; 

Kj, PLm, PLlm, dFmax, dELl, dELO, dELm; 

NCO, NCI, NCOO, NCOl, NCll, NClO, ECO, ECl, ECm 


S-model: 

L-model: 

C-model: 


Variables for the classes “grade-events” 

NS0[], NS1[], PISD; 

NL[], NL0[], NL1[], NL00[], NL01[], NL10[], NLllQ, 
EL0[], EL1[), ELm[], PL1[], PL[J, dFL[]; 

NC(], NC1[],NC00[], NC01[], NC10[], NC11[], 

EC0[], EC1[], ECm[], PC1[] 



77L11[] are numbers of correct good objects with grade; 

EL0[] are the errors of classification of bad objects on grade; 

EL1[] are the errors of classification of good objects on grade; 

ELm[] are the average errors in classification of good objects by 
grade; 

PL1[] are estimations of probabilities of grade-events Pljr in 
GIE; 

PL[] are estimations of probabilities of grade-events Pjr in GIE. 

For use in programming the described variables are given in a more 
obvious and compact form in Table 14.1. Here we give extra indication 
of using variables in the statistical analysis (S-analysis), in the combi- 
natorial analysis (C~analysis) and in the logic analysis (L-analysis). 

The block diagram of identification and analysis. Let us name the 
basic actions and modules of the object-oriented program: 

1. Input of 77, n, U5[][]; 

2. Computation of y5[], 7/50, NSl, PSm, ESm; 

3. Input of the array of a number of grades for signs FNJ[]] 

4. Computation of characteristics of the grade: NS[], 7/50[], 7751 [], 
PSl[], 
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5. Input of A^Ll, A^LO; 

6. Input or computation of initial values of PLm for signs; 

7. Input or computation of initial values of PL1\\ for grades; 

8. Computation PLlm, Kj for signs; 

9. Computation PL\\ for grades; 

10. Input of parameters for the training formula: Nopt,Kl and initial 
value Fmax\ 

11. Beginning of the cycle of optimization while Nopt < Ncur; 

Else STOP; 

12. Beginning of the cycle of optimization by Monte-Carlo method; 

13. Generation of dPLl[] by Monte-Carlo’s method; 

14. Computation of PLlr[], standardization of PLlr[], computation of 
PLr[\ for the grades; 

15. Computation of the risk of objects in statistical data and the average 
risk of objects; 

16. Computation of the average risk for objects and signs; 

17. Computation of Pad, Four, NLll, A^TOO, A^'TOl, NLlf), YL[N]; 

18. If Four < Fmax, then algorithm goes to item 12, else it goes to 19; 

19. Assignment Fmax = Four] N cur -f +; 

20. If Fmax > Fabs, then Fabs — Fmax; 

21. Output to the screen of Ncur, Fmax 

22. Writing to the file of Noptcur, Fmax; 

23. Computation of the new PLmr\\,PLm^ for signs and their correction 
by the condition PSm — PLm; 

24. Computation of PL1[] — PLlr[]; 

25. Computation of PLlm, Kj for signs; 

26. Ending the cycle of Monte-Carlo method; 

27. If there were no optimizations in the cycle by M-C, then deviation 
Fmax ~ Fmax - dF is applied and the algorithm goes to 12; 

28. End of the cycle of the number of optimizations. 
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Examples of realization. The SW “LP-estimation of risk” consists of 
a number of modules written in C++ language. The program core of 
SW has approximately 3000 operators. There are modules of different 
functional purpose written on Delfi-4, C++ and Java. The fragments of 
realization of the package can be seen by the demo-version on WebSite; 
http://www.ipme.ru/ipme/labs/iisad/soft.htm. Below in figs. 14.3-14.5 
the screen shots demonstrating work of SW are given. 

In fig. 14.3 the form for filling the application to a credit is shown. 
For each of 20 signs of the credit the list of grades is given (V is pre- 
scribed) and it is only necessary to specify values of grades for the sign. 
After filling the form the risk which is probability of non-return of the 
credit “Probability of non-return” and the attribute “Indication” of clas- 
sification of the credit as “good” and “bad” (0 or 1) are calculated. 

In fig. 14.4 the screen form for the analysis of the credit after an 
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Figure 14.3. The dialogue window for data input and estimation of the credit risk 
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Figure 14.4. The dialogue window “Training and estimation of accuracy” 



estimation of its risk is shown. The probabilities of grade-events of 
signs are resulted which describe the given credit are presented. The 
contributions of grades to risk of the credit are directly proportional to 
these probabilities. In the same screen form the meaning of admitted 
risk “admitted risk” and the average risk of bank “average bank risk” 
are shown. 

In fig. 14.4 the screen form for training risk LP-model are presented. 
On the left side of the screen form the parameters for the formula and 
process of training are given. They are set before the beginning of train- 
ing by the program itself, but can be changed by user. On the right part 
of the screen form the parameters of trained model in dynamics of its 
training are given. Values of probabilities of grade-events (their number 
in the given task is equal to 96) are written to a special file after each 
successful attempt of training. At the end of training in this file we find 
optimum estimations of probabilities of grade-events in the form, which 
allows us to use them in the subsequent sessions of optimization. 
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Figure 14.5. The dialogue window “LP-selection of the optimal security portfolio” 

In fig. 14.5 the screen form for optimization of the security portfolio 
are presented. 



14.3 Software for structural and 
logic modelling 

In paper [85] the structure and characteristics of the base version of 
the computer program ACM-2001 is considered. The program allows to 
build automatically analytical, statistical, markovian and network math- 
ematical models for computation of parameters of reliability, survivabil- 
ity, safety, efficiency and risk of functioning CS of the large dimension. 
Results of this paper by A. C. Mojaev are stated below. 

The theory of the automated structural and logic modelling (SL). The 
theory is based on methods, which allow to automate processes of con- 
struction of mathematical models for calculation of stability (readiness, 
survivability, safety), efficiency and risk of functioning for complex sys- 
tems of any structure and organization of functioning. The actuality 
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of this scientific direction is caused by the fact that in many applied 
areas the model analysis of systems is not implemented only because 
of manually unsurmountable unhandiness of construction of mathemat- 
ical models for real objects and processes only the LP-methods for the 
system analysis made it possible to solve fully the problem of automa- 
tion of construction of several kinds of mathematical models of systems 
(analytical, statistical, markovian and network). 

Technology of the automated modelling. The technology represents 
such form of the practical system analysis, in which at first the block 
diagram of researched system is developed, and the regimes (criterions) 
of its work and parameters of elements are set. Then, by a computer, 
completely automatically, precisely and operatively the necessary math- 
ematical models for the given regimes of operations of researched system 
under consideration are constructed. The system can have very large di- 
mension and complexity. Further, on the basis of the obtained models 
the machine calculations of the system characteristics are carried out 
and various tasks of analysis, optimization and synthesis of system can 
be solved for making scientifically reasonable decisions at stages of its re- 
search, designing, operation and management. The greatest effect from 
application of technology of the automated modelling is achieved when 
(due to the large complexity and high dimension of system) construc- 
tion of the mathematical model by old, hand-operated methods becomes 
impossible. Necessary conditions for realization of the given technology 
are creation of the appropriate theory and development of the program 
complex for the automated of the structural and logic modelling (SL- 
modelling) of complex systems of any structure. 

Logical- and-probabilistic modelling. ACM-2001 is based on the LP- 
method of system analysis [85“87] described also in Chapter 9. It is 
known that in the classical LP-method the graphic means of statement 
of problems (trees of events and connectivity graphs) represent only two 
logic operations AND, OR. This basis of operations is not functionally 
complete and allows to build only a limited subclass of so-called mono- 
tonic models of systems. The means of graphic statement of problems 
in the program system are the special schemes of functional integrity 
(CFI), which by construction can represent the functionally complete set 
of logic operations AND, OR and NOT. On this basis first complete 
realization in the program system of all opportunities of logic algebra 
was achieved. Thus, with the help of ACM-2001 it is possible to build 
automatically both all known kinds of monotonic models of systems of 
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Figure 14.6. Program modules and the structure of Software “ACM 2001” 

any structure, and essentially new class of non-monotonic models of sys- 
tems, in which it is possible to take into account correctly the influence of 
harmful (damaging, emergency, etc.) events on processes of functioning. 
The latter is especially important for construction of complex models of 
safety, danger and risk of functioning of various complex systems. 

Now considerable scientific and practical experience of development 
and use of the computer programs of a type ACM-2001 is accumulated, 
A lot of scientific researches has been done, more than 40 dissertations 
were successfully held up, the 100-hour educational course “Automated 
modelling of systems” was given. The ACM-2001 was applied in various 
areas of the system analysis, including the probabilistic analysis of safety 
and risk of technical, organizational and banking systems. 

The basic characteristics of ACM-2001. The common structure 
of this complex is given in fig. 14.6. The basic characteristics of the 
complex are as follows: 

1. The complex is developed by the modular principle in the program 
system Delphi 5. 
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2. All positive properties of the previous versions are kept, their flaws 
are taken into account and corrected and new results of development 
of the theory and technology of the automated structural and logic 
modelling of systems are introduced. 

3. The given version of ACM-2001 is directly intended for maintenance 
of educational process in the course “Automated modelling of sys- 
tems” , for performance of scientific work in various areas of system 
researches. 

4. By intension and form of production making ACM-2001 is the base 
system and covers four classes of problems of the automated mod- 
elling: analytical, statistical, markovian and network ones. On the 
basis of this system various specialized systems of the automated 
modelling (from probabilistic analysis of safety of nuclear stations 
to risk in business) can be developed. 

5. The graphical interface of the input-output provides graphic display 
of the initial data and results of automated structural and logic mod- 
elling. In fig. 14.7 the window of preparation of the block diagram 
of the system under consideration, and in fig. 14.8 the window of 
the necessary regimes and output results of automatic modelling are 
given. 

6. Modules of construction, storage and transformations of the scheme 
of functional integrity (SFI) provide the evident graphical input of 
new and using of before developed structural models of the systems 
under consideration. In fig. 14.7 a variant of the window of prepara- 
tion of SFI for the educational task of the safety analysis of a railway 
segment is given. After development of the graph, the SFI is auto- 
matically formed and stored in the computer memory as the work 
file of the appropriate system of L-equations (see the button Gb.dat 
of the tool panel in fig. 14.7). 

7. Modules of preparation, storage and transformations of parameters 
of elements allow the user to introduce new and use the earlier pre- 
pared initial probabilistic and other parameters of elements (see the 
button Harel.dat of the tool panel in fig. 14.7). As the basic param- 
eters of elements of simulated systems in ACM-2001 are used: the 
static probabilities of elementary events; the intensity of elements 
failure, the average times of restoration of elements, the signs of 
two kinds of groups of incompatible events, the signs of duplication 




282 E.D.Solojentsev 




Q IQ:, \|>Ol ^ k]^ ^ \ ^ ‘ rf? %«»( 






f'he €!syi^(^|j')i3i"5 iios e*r» Jojiyyf 
smi ®wtteheci eg-* tlhe ’S:j^s}.em 



;u>dsci^cs' 



0mkf^"tj8^ar 



:«ifcspFttsp pi tefS^irass 



T^©; hm^k^ gi TSu? tii%^ Of c:bi€?C't Ofi s«d*i 



im 

l^lili bi-eak 



0cr,id^?r>l 



f5f^k«S“iie»r 



enpsnemart 



Figure 14.7. The input window of structural model in the PC ACM 2001 



of functional nodes of SFI, the codes of four laws of distribution 
of non- failure operation time of elements, own operating times of 
elements, characteristics of efficiency or risk of various regimes of 
system operation. 

8. The modules of automatic construction of logic models allow us 
to form several kinds of logic functions of serviceability of systems 
(FSS) and logic functions of transitions (LFT). 

These functions are monotonic ones (in basis of operations AND^ 
OR) for systems of the first and second types, and any non-monotonic 
ones (in basis of operations AND^ Oi?, NOT); FSS with taking into 
account any initial condition of a system, groups of incompatible 
events, multi-functional elements, elements with number of condition 
more than two, combinative, consecutive and network processes. 
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Figure 14,8. The window of choice of simulation modes and output of results of 
calculations by ACM 2001 



The logic modelling in ACM-2001 realizes all combinatorial oppor- 
tunities of classical logic algebra and takes into account dependence 
represented with the help of logic of groups of incompatible events 
and logic of sequences of events in complex systems and processes. 

9. The modules of automatic construction of computed mathematical 
models carry out formation of the polynomials of probabilistic func- 
tions (for independent and several kinds of dependent events); imi- 
tating models for realization of statistical computations; markovian 
schemes and corresponding matrixes of transitional probabilities for 
calculation of the conditional laws of survivability (construction of 
corresponding differential and algebraic equations is possible); logic 
sequences for calculation of various variants of the network work 
plans of elements of simulated systems. The dimensions of logic and 
calculated mathematical models in the ACM-2001 are limited only 
by the volume of fast memory of the computer (RAM) and now 
achieve several tens thousand terms. By realization in ACM-2001 of 
methods of structural decomposition, the restrictions on dimension 
of formed models practically will be taken off. 

10. The modules for realization of techniques of calculations performance 
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are intended for quantitative estimation of various properties of sys- 
tems (non-failure operation, readiness, stability, survivability, safety, 
efficiency, risk of functioning) on the basis of the mathematical mod- 
els, obtained at the previous stages. Simultaneously with calculation 
of the general-system parameters, the corresponding characteristics 
of the role of separate elements (importance and contributions) are 
defined. It provides an opportunity of automation of the decision 
processes for many special problems of optimization, distribution of 
resources, target planning and management of systems. The auto- 
matic construction of models makes it possible to organize the so- 
lution of the mentioned problems in a real time scale of the system 
functioning. In the ACM-2001, the inclusion of various techniques of 
modelling and calculation are carried out with the help of managing 
elements of the Basic window shown in fig. 14.7. 

11. The modules for preservation, accumulation and output of results 
allow to form in memory of the computer the libraries of initial 
structures of the systems under consideration, parameters of their 
elements, along with all results of automatic modelling and calcula- 
tions of the system characteristics. The part of the most important 
information appears on-the-fly on the display panels of the Basic 
window (see fig. 14.7) during automatic modelling and calculations. 

With the help of this program complex it is possible to solve prac- 
tically all the problems mentioned in the published works of analytical 
logical and probabilistic modelling of systems, as well as any problems 
of the given class suggested by the user. 



14.4 Software for LP-modelling on the basis 
of cortege algebra 

This section follows works B. A. Kulik [88,89] to demonstrate the method 
of mathematically strict analytical logic and probabilistic modelling. 
The method makes it possible to obtain finite analytical expressions 
for the risk and to perform some additional researches on the analytical 
risk model. On the basis of cortege algebra the programs for computa- 
tion by a computer can be constructed. However, the orthogonalization 
of logic system on the basis of cortege algebra is only possible, if the 
number of condition of elements and system is within the limits defined 
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by resources of the computer. For example, for such problems as the 
credit risk and the security portfolio risk the risk logic function and ap- 
propriate risk polynomial cannot be placed in the memory of computer. 
Therefore, for solution of real problems of non-success risk the stated 
earlier risk LP- theory with groups of incompatible events is used, which 
realization is algorithmic and is not limited by resources of the computer. 

14.4.1 Risk analysis of systems with many conditions 

Statement of the problem. Many modern methods of analysis of the 
risk and safety of technical systems are based on LP-methods developed 
by the scientific school of I. A. Ryabinin [1,2,59]. The application of 
these methods makes it possible to estimate the risk and safety of many 
structurally complex systems. At the same time, these methods have a 
number of methodological problems, which are not resolved yet. One 
of them is the risk modelling and analysis for systems with many con- 
ditions. Below the approach to solution of this problem is suggested, 
based on the cortege algebra [88-90]. 

If a system and its elements have two conditions (“work-failure”, 
“on-off”, “dangerous-safe”, etc, then it is quite natural to interpret 
these systems in the terms of calculus of the statements (or Boolean 
Algebra); all structures of the calculus are mapped to the set of two 
elements: “false”, “true” or 0, 1. It is the model which is used frequently 
in the logic and probabilistic methods. However, as soon as we pass to 
logic modelling of technical systems with many conditions, we need to 
pass to logic systems with more than two values of the logic atom. And 
it means the transition to multiple- valued logic, that is inevitably related 
to invalidating of some Boolean Algebra laws and, as a consequence, of 
classical laws of the theory of probability [89] . 

The way out from this “deadlock” situation nevertheless exists and 
it consists in synthesis of algebra of sets and multiplace relations. This 
synthesis results in the mathematical model including as a special case 
both structures of mathematical logic, and structure of some variants 
of non-classical logic. Thus, in all cases the laws of algebra of sets and, 
correspondingly, Boolean Algebra remain true. 

Solution of the problem is based on the linguistic transformation — 
at the first stages we digress from the logic terminology and state the 
problem in the technical and algebraic terms. Let us begin with the first 
(technical) ones. Consider a system S with a set T = {yi,y 2 , . . . ,yr) 
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of conditions. Let the structure of conditions include some set V — 
(Vi, V 2 , . . . , Fn) of nodes (or subsystems). Each node in its turn can 
also be in one of sets of conditions, i.e. each Vi has a corresponding set 

— {xii,Xi 2 ^ . . . ,Xiki) of conditions. Here ki is a number of possible 
conditions for the node Vi, and the sets Xi are arbitrary. The latter sets 
can also be infinite continuous; in this case separate conditions can be 
given by points or intervals. 

The exact model of the system S is the mapping between all possible 
sets of nodes conditions and conditions of the system. Mathematically 
this relation can be displayed as follows: 

S: D — .y, (14.1) 

where D is the Cartesian product x X 2 x , . . x 

It is to note than the model (14.1) loses practical sense with increase 
of number of nodes, and also with increase of number of conditions of 
nodes and system, because even in rather small systems, the number of 
all elementary sets of conditions can exceed computing resources of mod- 
ern computers. Besides, at the moment it is not absolutely clear, how 
to apply to mathematical model (14.1) the powerful analytical means 
of the mathematical logic and the logic and probabilistic methods. The 
suggested approach to solution of these problems is considered in the 
following sections. 

Logic interpretation of the model. Let us first formulate the 
above stated formal description of technical system in the algebraic 
terms of the multiplaced relations (keeping our notations). Let D = 
Xi X X 2 X Xn be the many-dimensional space of coordinates. In the 
space using only some of these coordinates it is possible to choose sepa- 
rate subspaces or projections, and to set the multiplaced relations in the 
space D or any its projections. The list of the coordinates determining 
the given projection is referred to as the scheme of the relation. As is 
known, any set of relations on I), or on a fixed projection of D forms a 
system, isomorphic to algebra of sets, in which elements are elementary 
corteges, i.e. sets of n elements from various Xi, if the complete space D 
is considered, or sets of m elements {m < n), if the system is considered 
in some fixed projection D. At the same time, if we consider totality of 
the relations, given on the projections of D with the different schemes of 
relations, then the representation of such system as a system, isomorphic 
to algebra of sets, seems to be problematic. 
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However, the given problem has a solution with the help of structures 
and methods of the cortege algebra (CA) [88,89]. In the given system the 
basic structural unit is the C-cortege, which differs from an elementary 
cortege C-cortege is constituted by subsets of the sets not by 
their elements. The C-cortege is the set of elementary corteges, as it 
is interpreted as the Cartesian product of contained in it components. 
Association of some set of the C-corteges given in a certain projection, 
form C-system. Thus, it is possible to present any relation given in a 
certain projection as C-system. 

In order to combine in an uniform algebraic system, isomorphic to 
algebra of sets, relations given in different projections, the fictitious co- 
ordinates are introduced in cortege algebra for formation of the fictitious 
coordinates and the fictitious components are used, A fictitious compo- 
nent added to C-cortege or to C-system and taking the place i, is 
the set equivalent to all values area of the corresponding coordinate Xj. 
Thus, using fictitious components, it is possible to define any sets of the 
relations, given in different projections, to the dimension of the complete 
space or a certain generalized projection and to apply to them all oper- 
ations of algebra of sets. In this form the system of all possible relations 
of the complete space D, determined in different projections, becomes 
isomorphic to algebra of sets [90]. Essential difference of the suggested 
method of introducing fictitious coordinates from the known ones [89,89] 
is that the new coordinates are introduced in the multi-placed relations 
expressed by C-corteges or C-systems as sets, not element-wise. The lat- 
ter essentially reduces complexity of computing algorithms and volume 
of memory needed for storing the structures. Along with three above 
mentioned structures (elementary cortege, C-cortege and C-system in 
cortege algebra) two auxiliary structures are introduced: D-corteges and 
D-systems. More details can be found in [89], 

In cortege algebra among operations of algebra of sets the opera- 
tions of formation of projections are provided, which are reduced to 
three elementary operations with coordinates: 1) addition of fictitious 
coordinate, 2) removal of any coordinate together with the components, 
corresponding to it, and 3) rearrangement of coordinates. The intro- 
duction of these operations allows us to add to operations of algebra 
of sets the operations, which correspond to operations of the inversion 
and composition of mappings, and to operations having same semantics 
as quantifiers V and 3 in the calculus of predicates [88], As an illustra- 
tion we shall consider an example of calculation of composition of the 
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relations. 

Let two relations be given (in brackets of names of the relations we 
indicate the schemes of the relations) Ri(X 2 , Xs)={{a, a) , {a,b), {b,a), 
(6,c), (c, a), (c, c)} and ^ 2 )={(a, ^), (a,c), (6, a), (c,a)}. The 

composition of these relations {R 1 R 2 ) is traditionally calculated by the 
method of comparison of pairs of elementary corteges and choice of such 
pairs, at which the second element of the pair from the relation R 2 
coincides with the first element of the pair from the relation Ri. For 
each of such pairs result of the composition is the elementary cortege 
containing first element from a cortege belonging to R 2 , and second 
element from a cortege belonging to R\. For example, for the cortege 
(c, a) from R 2 the suitable pair is the cortege (a, 6) from Ri, and the 
composition of this pair is the cortege (c, b). Finally, after examination of 
all possible pairs of corteges from the different relations, finding suitable 
pairs, their compositions and exception of repeating corteges we obtain 

o i ?2 = {(a, a), (a, c), (6, a), (6, 6), (c, a), (c, b)}. 

Now we shall consider, how this operation in cortege algebra (CA) is 
done. At first, the relation Ri and R 2 are written as C-systems: 



{a} {a, 6} ‘ 


Po — 


■ {a} 


{6,c} ■ 


_ {6,c} {a,c} _ 


, 1x2 




{«} J 



Further, we make calculations by the following algorithm: 

1) We shall add fictitious coordinate Xj to Ri and fictitious coordi- 
nate X 3 to R 2 . Thus we bring these structures to the same scheme of 
the relation (Xi,X 2 ,X 3 ): 



■ * {a} {a, 6} ■ 


/?r. — 


{«} 


{b,c} * 


_ * {6,c} {a,c} _ 


) -^2 


{b,c} 


{a} * 



2) By using algorithms given in [89], we calculate the intersection of 
these C-systems: 



Ri n i?2 ~ 



■ * {a} {a, 6} ■ 


n 


{«} 


{&, c} * ■ 


* {6,c} {a,c} 


1 1 


{b,c} 


{ 0 } * _ 



{b,c] {a} 

{a} {6,c} {a,c}J’ 



(14.2) 
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3) We check absence of empty C-corteges (if they are present, they should 
be removed). Then we delete the coordinate X2: 



Ri o i?2 — 



{6,c} {a,b} 

{a} {a,c} 



It is proved that the structure of the elementary corteges, contained in 
the obtained C-system, up to rearrangement of elements of the obtained 
relation is equal to the result of calculation of the composition obtained 
by the traditional approach. In [88] it was established, that the func- 
tionality of cortege algebra are sufficient for representation of all means 
of calculus of predicates. 

The set of all various projections of the complete space D, including 
the space D itself, is defined in cortege algebra as the flexible univer- 
sum. If it appears that any cortege algebra formula is equivalent to any 
projection (particular universe), then such formula corresponds to the 
general formula of many-sorted calculus of predicates. If, on the con- 
trary, the equality of some formula of the cortege algebra to empty set 
is established, then the given formula corresponds to the unsatisfiable 
formula. 

In order to specify correspondence between models of cortege algebra 
and various variants of logic, we shall consider a number of restrictions, 
imposed on the subject domain at its representation by model (14,1), 

Restriction Cy the mapping D — > Y is one- valued (or functional). 
It means that to any elementary cortege from D can not correspond 
more than one element from Y. 

Restriction C 2 : the set Y contains exactly two elements. 

Restriction C 3 : sets Wi, X2 , . . , , F are equivalent (on capacity). 

Restriction C 4 : restriction C3 provided that the capacity of each of 
these sets is equal to 2, 

It is easy to prove that 



1, A system, satisfying the restrictions C\ and C 2 , appears isomorphic 
to some model of many-sorted calculus of predicates; in this case the 
relations on any projection of space D are interpreted as multi-placed 
predicates or logic formulae; 

2, A system under restrictions Ci and C 3 corresponds to a model of 
multi-valued logic, in which an obligatory condition is the equivalence 
of value areas of the truth for all variable and for the system as a 
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whole; 

3. A system under restrictions C\ and C 4 corresponds to a model of 
calculus of statements. In all these interpretations the laws of algebra 
of sets hold. It, seemingly, contradicts to “multi-valued” of systems 
under restrictions Ci and C 3 , because in the multi-valued logic not 
all laws of Boolean algebra are true. However, this contradiction is 
especially terminological. In multi-valued logic one object can have 
more than one negation. Certainly, it is possible to name “negations” 
of each other the pairs of structures with not coincident “values of 
the truth” even, if from the point of view of algebra of sets (and 
accordingly CA) they are not complementary. However, it is better 
to avoid ambiguity and to introduce for such “negations” some other 
term, for example “alternative”. Thus, the uniqueness of negation is 
kept, and all laws of Boolean algebra hold. 

It is possible to give one more logic interpretation for the given sys- 
tem, by keeping only the restriction C\ (otherwise the system appears 
unpredictable). It is possible to consider the united space D xY, which 
relations in different projections can contain (or not contain) coordinate 
Y. Then the set of elementary corteges of the space D x Y can be 
divided into two not intersecting sets: the set of admitted (true) and 
the set of non-admitted (false) conditions which are determined accord- 
ing to constructive or technological features of simulated system. Then 
mapping 



Sc'- D xY — ^ {true, false} (14.3) 

is isomorphic to a model of many-sorted calculus of predicates, in which 
there are no restrictions on number of conditions of nodes and of the 
system as a whole. 

Immersion of a system into the probabilistic space. The suc- 
cess of LP-modelling and analysis of risk and safety of systems in many 
respects was determined the fact that in the theory the known algorithms 
were generalized and new ones were developed. These are algorithms of 
orthogonalization of systems allowing to decompose the formula of cal- 
culus of the statements to a disjunction of simple conjunctions where 
any pair does not contain the general satisfying substitutions [88,89]. 
The orthogonalization of system makes it possible to present the prob- 
abilistic measure of system as a simple analytical formula suitable for 
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analysis and computation. However, using methods of orthogonaliza- 
tions, the researchers were forced to consider one rigid restriction: each 
unit and system should have no more than two conditions, and the model 
of system should be necessarily represented as a model of calculus of the 
statements. 

In the cortege algebra this restriction is replaced by a weaker one: 
system orthogonalization is possible, if the number of condition of nodes 
and of the system is limited by computing resources of the computer [89] . 

Let the area of condition change for each node of systems (14.1) 
or (14.3) consist of a finite number of elements or be broken into a fi- 
nite number of in pairwise-disjoint sets, and for each of the areas the 
probability distribution function is known with known parameters of 
the distribution. Then, if models (14.1) or (14.3) are described by a 
set of formulae of the cortege algebra, these formulae can be easily 
transformed with the help of the developed algorithms to orthogonal 
C-systems, which can be easily transformed to the computed formulae 
allowing to calculate the probability of separate conditions of system. 

The inverse problem is possible too, when we know with probabil- 
ities of the system conditions with higher accuracy than estimation of 
parameters of some nodes. Then there is an opportunity to use the com- 
puted formulae obtained on a basis of orthogonalization, to specify the 
estimations of the probability distribution parameters of conditions of 
nodes of the system. 

Conclusion. On the basis of methods and means of cortege algebra 
it is established that systems with many conditions can be presented 
not only in the terms of multi-valued logic, but also in the terms of 
the system, isomorphic to the algebra of sets. Then in this system it 
is possible to use the laws of the classical theory of probabilities. If 
conditions of the system and its nodes are interpreted not as values of 
the truth, but as some value areas of corresponding variables, then it 
is possible to interpret dependence between conditions with the help of 
system, in which the laws of Boolean algebra are true. 

14.4.2 Description of Software 

Restrictions in the given variant of the program are as follows: the L- 
function should contain no more than 79 variables and to consist of no 
more than 255 terms (disjunctions), the elements and system can be in 
two conditions. In the program the L-model of risk is represented by 
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matrix. It is caused by specificity of representation of the given class of 
problems in structures of cortege algebra and, at the same time, provides 
reduction of labor at input of the initial data and output of results. 

In the matrix representation of the formulae only 4 symbols are pro- 
vided: “0”, “1”, and The symbols “1” and “0” in the column 
i replace the appropriate literals X{ and the negation Xi. Instead of 
the omitted literals in the conjunction we use the mark , in the dis- 
junction we use the mark In the mode of editing the matrix form 
of the initial formula is displayed on the screen. In the program two 
opportunities for input of the formulae are provided: 

1. Prom a database; in this case when choosing particular problems after 
pressing Enter the user is informed how many variables and how many 
disjunctions the problem has; 

2. The input from the screen of formula; in this case parameters of the 
problem are set first the number of variables and the number of dis- 
junctions. 

The program based on the original accelerated algorithm of trans- 
formation of CNF into orthogonal DNF, in which the value of conjunc- 
tion of any pair of conjunction contained in it is “false”. The number 
of conjunctions in the transformed problems is not known beforehand. 
Therefore it is necessary to set this number. If it is simply required 
to solve the problem of feasibility, then it is enough to set the number 
1. Then the program finds one conjunction, which contains some num- 
ber of satisfying substitutions, or displays the message “Problem has no 
solution” . 

If a greater number of conjunctions is given the program stops in the 
cases when; 

1. The formula is insatisfiable; 

2. The number of conjunctions in the completely transformed formula 
is less than the given number; then the number of conjunctions will 
be shown, equal to the given number; in this case transformation of 
CNF into DNF remains uncompleted. In this case for complete trans- 
formation of CNF into DNF in the following session with the given 
problem it is necessary to set a greater number (for problems of large 
dimension it is recommended to set 10000). The examples of problems 
of large dimension are possible, for which in the given variant of the 
program the complete transformation is unattainable. It is because all 
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obtained conjunctions are stored in fast memory (PAM), that allows 
to speed up performance of some operations; 

3. If there is a lot of the intermediate data, the PAM can be overfilled. 
If it is necessary this restriction can be taken off by allowing to keep 
intermediate data in disk memory too. 

In all cases, when given CNF is feasible, obtained conjunctions can 
be seen on the screen and written down in a file. It is also possible 
to write down to the file the new made problem or the problem loaded 
from the database if any changes were made in the mode of editing. The 
name of the file is chosen by the user, thus the program does not check 
the existence in the database of the file with the chosen name. If the 
name of the new problem coincides with the name of a problem already 
stored in the database, then the latter will be erased. 

One of the essential factors of reduction of time of solution of the 
problem of feasibility and transformation of CNF into orthogonal DNF is 
the algorithm of sorting. It has polynomial complexity, but for problems 
of the large dimension (the number of variables is more than 30, the 
number of disjunctions is more than 100) for its realization some time 
is required (depending on the dimension of the problem and technical 
parameters of the computer), it takes from several seconds to several 
minutes. If the problem of calculation of probability is not solved, this 
algorithm can be switched off, but then it is possible that the process 
of the solution of the basic problem does not end. Besides, the using 
of algorithm of sorting for a problem of translation of CNF into DNF 
allows us to reduce general number of pairs of orthogonal conjunctions 
at the complete transformation of CNF into DNF. 

The Software can be used in any catalogue. It is desirable, that this 
catalogue should contain a subdirectory with the name ZD, in which 
the texts of problems and solutions are written. 




Chapter 15 



RISK LP-MODELS IN BUSINESS 



In the present chapter we shall consider some examples of modelling, 
analysis and management of risk in structural complex systems in vari- 
ous subject field of business. 

15.1 Credit risks: scenarios and LP-models 

Credit activity is the basic form of activity of commercial and state 
banks. In Russia there are many new large, medium and small banks 
for crediting juridical and physical persons. All of them are specific, since 
they serve different groups of population in different cities and areas of 
the country and enterprizes in different branches and of different sizes 
and with a different form of ownership. The individuality of banks is 
also stimulated by concurrence. 

15.1.1 Credit risk problem 

Credit business is related to risk. Without risk there is no profit. Condi- 
tions of credit activity change, the risk level changes too. Credit activity 
should adapt to conditions of developing national economy and to the 
living standard of population. Of primary importance for safety and 
stability of banks is the presence of laws protecting interests of creditors 
and clients. This is a keystone for successfully developing economics 
with its blood system — successfully functioning banks. In conditions 
of stable development of economics the role of methods for estimation 
and analysis of risk is substantial. 

The basis of bank stable functioning is the quantitative estimation 
and analysis of credit risk. The price for risk should depend on the 
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credit risk value. In addition to the risk average value (determined 
according to the previous activity) each bank would also like to know 
the quantitative estimation both for risk components of each credit and 
the average banking risk. 

Each bank has to have its own risk model for quantitative estimation 
of the credit risk with high accuracy. The higher this accuracy, the less 
the loss of bank, the less the rate of the credit and the higher the com- 
petitive ability of the bank. From increase of the accuracy of methods 
entire society as a whole wins. The creation of the risk effective model 
and optimal management of the credit risk is only possible on the basis 
of the continual quantitative analysis of the statistical information on 
success fullness of credits. 

Such requirements to models of credit risk are in full answered with 
the risk LP-models which are almost two times more accurate than 
known methods, 

15.1.2 Logic and probabilistic models of credit risk 

The credit risk model uses the risk structural model of the “node” type 
(fig. 11.1, a). Above, in Chapters 11 the credit risk model is described 
and the credit risk non-success L-model and P-model are presented. The 
models are set by expressions (11.9) and (11.10), respectively. The credit 
risk scenario is described as follows: the credit non-success occurs if any 
one sign-event or any two sign-events or . . . all sign-events happen. 

We use the following signs [7]: 1 is Balance of Account in Bank, 2 
is Duration of Loan, 3 is Credit History, 4 is Intended Use of Loan, 5 is 
Amount of Loan, 6 is Securities Account, 7 is Duration of Employment, 
8 is Payment to Partial Discharge (in % of available income), 9 is Marital 
Status and Gender, 10 is Common Liability or Guarantee, 11 is Time 
of Spent in Current Residence, 12 is a Type of Guaranty, 13 is Age, 
14 is Other Loans, 15 is Accommodation, 16 is Number of Loans in 
Bank Including new Loan, 17 is Profession, 18 is Number of Relatives 
Dependent for Support, 19 is Phone, 20 is Citizenship. 

In [76] for comparison of different techniques, the “standard” package 
of credit was used. The package contained the data on N = 1 000 credits 
of physical persons; Ng = 700 of the credits were good and = 300 
were bad. The credit was described by n — 20 signs which in the sum 
have 94 grades. 

For training the risk LP-models the training sample of 700 credits 
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(500 good and 200 bad credits) and the control sample of 300 credits (200 
good and 100 bad credits) were used. With different random ways of 
formation of the training and control samples, the difference in accuracy 
of classification of objects on these samples did not exceed plus or minus 
one per cent that confirms high adequacy of the risk LP-model. 

Comparison of different techniques of the risk estimation is done by 
parameters of accuracy of classification of credits (12.2) Em, Eg, E^, 
on the same statistical data [76]. This information was used earlier 
for accuracy estimation of 10 different techniques of credit classification 
based on the linear (LDA) and quadratic (QDA) discriminant analysis, 
cluster analysis (CARD) and neuron networks (NN). 

Parameters of the risk LP-model after training are as follows: 

Fmax — 826; Ngs—b 68 ] ^”{,5=258; A'^c=610 (this is the number of good 
objects chosen from the ratio Egiy—3 of incorrectly identified good and 
bad credits); Pmin=b.230 (minimal risk among credits); Pmax=0.S79 
(maximal risk among credits); Pa,(i=0.306; Pm=0.3 (the average risk 
according to statistics) . The credit risk LP-model has essentially smaller 
errors in classification of credits Em — 0.174; Eg = 0.189; Eb = 0.143, 
than known techniques, which give Em = 0.25 0.28 (see Table 12.5). 

The interesting description of the credit risk model for companies is 
presented in the book of Price Waterhouse company “An Introduction 
to Credit Risk Management” and in the work [7]. The risk L-model 
and the risk P-model are described by (11.9) and (11.10), which are 
constructed for the structural risk model, shown in fig. 15.1. 

15.1.3 Analysis of bank credit activity 

The logical and probabilistic analysis of the risk model and the bank 
credit activity is carried out with use of expressions 13.3-13.8 and the 
same standard statistical data [76]. For each sign j (Table 15.1) were 
define [7,80]: the average values of probabilities Pljm and Pjm and the 
factor Kj of connection between them, and the reduction of the number 
of identified good and bad credits dFj at exception of this sign from 
the risk model. The model after such change is retrained. Reduction of 
the number of identified credits is determined by comparison with the 
optimal trained risk model having all signs. 

According to the obtained results, the maximum contribution to the 
accuracy of credit recognition is brought with the sign-events Zq, Zi, 
Zs, Z 4 , Zq, Z 2 , Z\ 2 . The zero contribution is brought with the sign- 
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Credit risk 




Figure 15.1. The structural credit risk model for companies 

events Zio, Zu, Ziq, Zn, Zis] excluding these sign-events (last line in 
the table) reduces the number of identified credits by two. These sign- 
events can be used for change of the logic structure of the risk model 
with the purpose of increase of its accuracy. For this it is necessary to 
replace the sign-events by their combinations with negations of some 
variables. Examples of such constructions are given in [7]. 

For grade-events (Table 15.2), constructed on intervals of change of 
the credit time Zi and the client age Z\ 2 , for the optimum trained risk 
LP-model {Fmax — 82; Ngc ~ 610) in [7,80] the following parameters 
are found: 

1. Frequencies ITOj^, Wljr of grades for all, bad and good credits, 
respectively; 
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2. Probabilities of grade-events Pljr and Pjr'i 

3. Recognition errors in grades Ejr^ Ebjr-, Eljr for all bad and good 
credits, respectively; 

4. Changes of the criterion function dFjrP and dFjr~ at correction of 
the grade interval lengths by ± 25%; the model after such change was 
not retrained and the criterion function after one step of calculations 
was fixed. At that the lengths of two next intervals change. Values 
of changes are placed in the line for the first interval. 

By results of researches it is possible to make the following conclusions: 

1. The contributions of sign-events to the credit risk are proportional 
to values of probabilities Pj, j — 1, 2, . . . , 20, equal to the grade- 
event probabilities Pj>; 

2. The change of interval lengths of some grades reduces the criterion 
function (accuracy) of the risk LP-model up to dFjr ~ 20 units 
(from 1000 objects); 

3. The change of intervals of some grades does not reduce the accu- 

racy of the risk LP-model {dFjr =0). It means, that at retraining 
the criterion function of the risk LP-model can be increased to 
exceed 822. 

The accuracy changes of the risk LP-model at the change of the 
number of grades in a sign was investigated for the first sign (the time 
of the credit), which in the initial variant had 10 grades. After retraining 
the risk model, the following results were obtained: in absence of the sign 
Fmax = 800; with two grades F^ax = 812; with four grades Fmax = 812; 
with ten grades Fmax = 824; with hundred grades (in that case there 
was seventy empty grades) Fmax — 828. Each sign of the credit had an 
optimum number of grades. 

As a result of the carried out analysis of the credit risk LP-model it is 
established that the criterion function can be increased by the structural 
identification methods up to Fmax = 840 -f- 845, that is the average error 
in classification of credits can be reduced to Em — 0.155-^-0.15 (see 
Table 12.5). 
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Table 15.1. The analysis of contributions of sign-events 
to accuracy of the credit risk model 



Signs, j 


Number of 
grades, Nj 


R'^jm 


Rjm 




dFj 


0 


4 


0.272384 


0.020226 


0.074255 


-48 


1 


10 


0.063346 


0.012359 


0.195102 


-22 


2 


5 


0.098475 


0.009327 


0.094713 


-20 


3 


11 


0.090820 


0.020927 


0.230421 


-24 


4 


10 


0.080377 


0.017593 


0.21888 


-18 


5 


5 


0.272148 


0.022466 


0.082550 


-22 


6 


5 


0.206945 


0.018549 


0.089632 


-10 


7 


4 


0.266619 


0.017736 


0.066521 


-0 


8 


4 


0.183897 


0.014253 


0.077505 


-12 


9 


3 


0.318015 


0.018295 


0.057528 


-12 


10 


4 


0.251871 


|0.018974 


0.075331 


-2 


11 


4 


0.247375 


0.017166 


0.069392 


0 


12 


5 


0.206718 


0.018900 


0.091428 


'-16 


13 


3 


0.235637 


0.014733 


0.062524 


-8 


14 


3 


'o.261648 


0.017591 


0.067231 


-12 


15 


4 


0.341959 


0.021975 


0.064261 


-2 


16 


4 


0.289853 


0.018739 


0.064649 


-2 


17 


2 


0.482499 


0.017417 


0.036097 


0 


18 


2 


0.508613 


0.018138 


0.035661 


0 


19 


2 


0.750896 


0.018326 


0.024405 


-4 


10+11+ 


16+17 








-2 



15.2 Bribes: scenarios and risk LP-models 

Let us consider abilities of the risk LP-models, using as an example the 
problem of bribes or estimation of the bank personnel qualification. At 
that we solve this problem as an addition to the basic already considered 
problem of analysis of the bank credit activity, using the same informa- 
tion on successes of credits. Here we shall explain reasons of the credit 
non-successes not by the set of credit signs, but by the qualification or 
dishonorableness of the bank personnel [ 7 ] . 

The new risk L-model depends on the structure of bank depart- 
ments. To be specific we accept the structure of the risk model of the 
type “bridge” shown in fig. 11.1, b. Let us describe scenario of the 
risk model. The object has five elements which correspond to the logic 
variables Zi, Z2, Z3, Z4, Z5. The object is complex as it includes connec- 
tions AND, OR, and repeated elements. The events Zi, Z2, Z4, 

correspond to functional groups of officials who make decision on giving 
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Table 15.2. Contributions of grade-events to the accuracy of the risk model 





WOjr 


fTTv 


Pljr 


Pjr 


Ejr 


Eljr 


F'Ojv 


dFjr — 


dFjrP 


Term of credit j = 


= 1 














0.014 


0.007 


0.007 


0.01 


0.019 


0.214 


0.429 


0.0 


0 


0 


0.002 


0.001 


0.001 


0.070 


0.014 


0.5 


1.0 


0.0 


-2 


0 


0.054 


0.032 


0.022 


0.194 


0.038 


0.278 


0.682 


0.0 


-20 


0 


0.017 


0.005 


0.012 


0.159 


0.031 


0.412 


0.5 


0.2 


-10 


0 


0.086 


0.038 


0.048 


0.145 


0.028 


0.256 


0.417 


0.053 


-8 


0 


0.057 


0.019 


0.038 


0.095 


0.019 


0.228 


0.289 


0.105 


-16 


0 


0.224 


0.066 


0.158 


0.067 


0.013 


0.169 


0.196 


0.106 


-4 


0 


0.187 


0.056 


0.131 


0.053 


0.010 


0.203 


0.183 


0.250 


-22 


-2 


0.359 


0.076 


0.283 


0.016 


0.003 


0.114 


0.081 


0.237 


0 


0 


0.0 


0.0 


0.0 


0.1 


0.019 


0 


0 


0 






Age of client j = 


12 














0.190 


0.080 


0.110 


0.283 


0.027 


0.237 


0.345 


0.087 


-18 


-14 


0.511 


0.142 


0.369 


0.233 


0.021 


0.186 


0.201 


0.148 


-26 


-26 


0.248 


0.065 


0.183 


0.093 


0.008 


0.113 


0.082 


0.200 


-12 


-4 


0.028 


0.007 


0.021 


0.346 


0.032 


0.178 


0.238 


0.0 


0 


0 


0.023 


0.006 


0.017 


0.044 


0.004 


0.217 


0.117 


0.5 







credits. For example, the officials from Zi and Z 2 check the maintenance 
of credits, and the officials from Zs and Z 4 make the decision on the size 
and terms of the credit. The top officials from Z 5 manage the process. 
The client visits one of the top officials who either advises the client or 
takes a bribe and directs the client to officials from groups Z 3 or Z 4 
who take bribes too. The number of officials in each functional group 
corresponds to the number of grades in the sign. The risk L-model in 
the disjunctive normal form is constructed on the basis of the shortest 
paths of successful functioning (see ( 11 . 11 )). After orthogonalization 
of the model we obtain the risk P-model of successful functioning (see 
( 11 . 12 )). 

The given credits are either successful (grade 1) or unsuccessful 
(grade 0). The reasons for non-success are unjustified crediting as a 
result of bribe or bad skill of officials. The crediting is depicted in the 
table “Objects and signs” where visas of officials and the final result are 
fixed. 

For training the “bridge” risk P-model the table with 1000 credits 
(700 are “good” and 300 are “bad”) is used. Five sign-events have from 
4 to 11 grades; in all there are 40 grades. Hence, the risk LP-model is 
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Table 15.3. Average probabilities for the sign-events and the grade-events 



Signs 

j 


Factor 

K, 


Probabilities 

Pjm 


Probabilities 

Pljm 


Number of grade 


1 


1.916036 


0.478113 


0.249540 


4 


2 


4.586733 


0.348310 


0.075949 


10 


3 


2.233272 


0.298833 


0.133823 


5 


4 


3.341342 


0.388857 


0.116348 


11 


5 


3.177692 


0.291868 


0.091775 


10 



Table 15.4- Probabilities of grade-event and their frequencies 



Probabilities 


Probabilities 


Frequencies 


Plr 


P Ir 


fPlr 


1.000000 


0.522300 


0.274 


0.596084 


0.311103 


0.269 


0.248278 


0.129579 


0.063 


0.070927 


0.037017 


0.394 


P2r 


Pl2r 


W2r 


0.687703 


0.149933 


0.014 


0.227359 


0.0495688 | 


0.002 


1.000000 


0.218209 


0.054 


0.510577 


0.111316 


0.017 


0.704722 


0.153643 


0.086 


0.570149 


0.124304 


0.057 


0.448856 


0.097859 


0.224 


0.434821 


0.094799 


0.187 


0.001675 


0.000365 


0.359 



trained on the same data which is used in the above examples for first five 
signs, connected logically. As a result of training the probabilities Pjr 
and Pljr for all grade-events are obtained and the following parameters 
of the risk LP-model are calculated: Fmax — 720; Ngs = 516; N^s — 204; 
Pad = 0.3094. The risk LP-model has the average error in classification 
of objects Em = 0.28. 

Some results of computing researches are given in Tables 15.3-15.4. 
The sign-events 1 and 4 have the maximum average probabilities Pjm- 
The same events bring the maximum contributions to the average risk 
Pm‘ The average probabilities Pjm for sign-events differ nearly in two 
times (Table 15.3). 

Relative frequencies Wjr and probabilities Pl^^ of grades give 1 in 
sum in GIE, but the values can essentially differ (Table 15.4). Proba- 
bilities of ‘Tribes” or “unskilled” officials (probability Pjr) differ more 
than in 10 times. 
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15.3 Frauds: scenarios and LP-models 

The fraud is not the crime which is made a parade. There is no question 
about “corpus delicti” at a robbery of a bank which is witnessed by em- 
ployees or clients. Fraud differs from other kinds of crime by difficulty of 
its revealing. However, frauds have a mass character and there are many 
data on frauds both in judicial law-court, and in the staff departments 
of large firms and banks on frauds . 

For each type of the fraud it is possible to find signs [7, 38] which 
are characteristic. Each of such signs has at least 2 grades. The fraud 
risk P-model can be trained on statistical data by methods, described 
in Chapter 12. 

Existing methods [7] allow to estimate the presence of fraud only 
qualitatively and do not give reliable recommendations, whether it is 
necessary to begin investigation. Such investigation can be carried out 
only in the case when there are serious reasons to believe that the fraud 
took place in the past or that the fraud is done now. The value of this 
“seriousness” is not quantitatively estimated, and the final decision is 
accepted by the company head, who can be biassed. 

15.3.1 LP-model of manager’s fraud 

Special signs testify to the fraud of the manager [7,38]. They are di- 
vided into the following basic groups: 1) anomalies in activity of the 
enterprize; 2) personal qualities of the manager; 3) anomalies in orga- 
nizational structure of the company; 4) special relationship with other 
partners. In their turn, these groups include other warning signs of 
“deeper level”. Corresponding events have probabilities. In total it is 
suggested about 40 signs of the fraud which are divided into some groups. 

Signs of frauds which reveal as: 

1. Special relationships with partners, 

2. Special relationships with banks and financial organizations, 

3. Special relationships with managers, 

4. Special relationships with parent companies and tax services, 

5. Special relationships with auditors, 

6. Presence of private interests, 

7. Financial needs. 
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8. Predilection for gambling and risky deals, 

9. Vague or criminal past, 

10. Dependence of financial well-being only from activity of the given 
firm, 

11. Dishonest or unethical behavior at work. 

Signs of frauds with reveal as unnecessary complicated structure of the 
company: 

12. Absence of effectively working division of internal company audit, 

13. Belonging to the branch, related to high risk, and adherence to 
highly risky operations, 

14. Use of out-of-date or worn out production means, 

15. Frequent changes among the top managers and directors, 

16. Large transactions with related partners. 

Signs of frauds, which reveal through the financial accounting and other 
documents: 

17. Inexplicable changes in the balance report, 

18. Work on the verge of bankruptcy, 

19. Untrustworthy high profitableness in the report, 

20. Unusually good bargains at the end of the accountable period, 

21. Deterioration of the quality of the profit, 

22. Insufficiency of a basic capital, 

23. High debts or the big parts of overhead charges, 

24. Difficulties in collecting debts and problems, related to movement of 
finances, 

25. Faster growth of charges in comparison with incomes, 

26. Dependence of manufacture on one or two products, 

27. Participation of the company in legal processes. 

Other signs of frauds are: 

28. Frequent change of auditors, 

29. Refusals or delays in information given to auditors. 
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30. Refusals of auditors from pronouncement of judgment or disagree- 
ment with the data of submitted financial documents, 

31. Withdrawals of licences, 

32. Frequent checks by supervising companies, 

33. Information that the given firm is engaged in risky operations, 

34. Frequent or significant hiding of assets from the taxation, 

35. Continual problems with taxation authority, 

36. High personnel fluctuation among managers, 

37. New top managers, 

38. Breach of admissible debts, 

39. Use of several banks, 

40. Inability to provide financing by formation of loans or credits, 

41. Continual pressure to merging, sale or absorption of ones firms by 
others, 

42. Reorganization of the structure of partner relations; 

43. Frequent change of legal counsel, 

44. A plenty of new customers or suppliers. 

45. Pleading pressure by politicians, defenders of environment and pub- 
lic opinion. 

The scenario of the manager fraud is described as follows: the fraud 
can take place if any one sign-event or any two sign-events or . . . all sign- 
events occur. The risk L-model of the fraud in the disjunctive normal 
form is given by expression (11.9) and the fraud risk P-model is given 
by expression (11,10). 

15.3.2 LP-model of fraud with investments 

Usually the financial reporting is falsified to show overestimated incomes 
of the enterprize. These overestimated incomes are used to increase 
the market rate of shares of the given company and incomes by these 
shares. Doing such frauds swindlers frequently give false promises and 
deliberately distort the facts. All this is done to attract of additional 
capital investments. In frauds with investments, the deceit, as a rule, 
concerns the verbal or written promises of high dividends. 
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Signs of frauds are: 

1. High annual interest rates; 

2. Investments which do not have business interest; 

3. Pressure on investors so that they should invest means as soon as 
possible; 

4. Use of all ways for evasion or reduction of taxes; 

5. The area of business that is new for the given city or district; and 
it is kept back where these managers appear from and where they 
were engaged earlier; 

6. Actions, having been accompanied with bankruptcies or scandals; 

7. Exposing figures and financial documents which have not gone through 
the public checking; 

8. Projects, based on reception of “unofficial” reward, involved schemes 
of marketing, searching special approaches to people, having money, 
and verbal agreements, about which it is “impossible” to speak, 
because of local laws; 

9. Financial accounts or advertising applications, not confirmed by au- 
ditor check; 

10. Investments, which mean continuation of inflation or preliminary 
fixation of attractive interest rates on the laid-down capital, which 
in the given moment cannot be realistic; 

11. Promises of success of investments, based on someone’s “unique” 
abilities or opportunities to achieve the financial successes (type of 
prediction of the future prices for the goods); 

12. Exposing special appeal of these investments, based on emotions; 

13. Necessity of reception of large loans for achievement of success; 

14. Search of investors for payment of existing debts; 

15. Luxurious style of life of top officials, despite the fact that their 
business began rather recently; 

16. Pressure to invest all money to one enterprize; 

17. Impossibility to leave business or to bring back the investments; 

18. Complaining to cause the investor sympathize with the company 
and to involve additional means for overcoming allegedly temporary 
problems. 
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The scenario of the fraud with investments is described as follows: 
the fraud can take place if any one sign-event takes place or any two sign- 
events take place or . . . all sign-events take place. The fraud risk L-model 
with investments in the disjunctive normal form is set by expression 
(11.9) and the fraud risk P-model is given by expression (11.10). 



15.4 Management of the state and development 
of company by risk criterion 

15.4.1 Principles of management of banks or companies 

The main defect of used techniques is the impossibility to construct the 
risk general model, for example, of the bank as a whole, using the risk 
special models on directions of the bank activity. It does not allow us 
to develop the risk management model of the bank by the risk criterion. 

We consider the management of the condition and development of 
bank by the risk criterion as a problem of management of a complex 
object. The problem is to keep a condition of bank or to transfer it from 
an initial condition to a given final one by some stages. At each stage we 
estimate the bank condition by the value of the non-success risk (that 
is, by probability P of non-return of credits, etc.). The possible material 
losses are expressed by the formula T — P • E where E are resources of 
the bank. 

Development is considered as the management by the bank condition 




Figure 15.2. The scheme of management of bank or company development as a 
complex object: Y = Risk is the controllable parameter, U are controlling actions, 

W are correcting actions 
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(fig. 15.2) with movement from the initial condition A to the given final 
condition B by the chosen program trajectory and correction of the bank 
condition in the case of a deviation from this trajectory. The program 
trajectory (steepness and convexity of the line) is chosen by heads of the 
bank. The program trajectory A~B passes inside a corridor of admitted 
values of parameters Y. Such interpretation of the management problem 
of the bank condition and development introduces the following basic 
concepts: 

Y (P, T) are controllable parameters; 

P{P\, P 25 • • • 5 Pn) are calculated probabilities of non-success in activity 
directions; 

T(Ti,r 2 , • • • j^n) are calculated financial losses in activity directions; 

U 2 , ■ . 0 are managing influences (resources, actives, rates, volumes 
in directions), specifying conditions of bank at development stages; 
W{Wi,W 2 t ■ ■) are adjusting influences (resources, actives, rates, vol- 
umes in directions) for returning the bank condition to the program 
trajectory if the condition deviate from the trajectory; 

H{Hi, H 2 , . . .) are stages of bank development. 

During development on the chosen trajectory the parameter values Y 
can be obtained for different sets of managements U. We can return the 
bank from the condition C to the given trajectory A-B using different 
sets of correction values W too. 

The management information technology of the condition and devel- 
opment bank by the risk criterion includes the following procedures: 

1. Forecasting non-success because of parameters F, that is, leaving the 
corridor of admitted values; 

2. Modelling or distribution of resources for the check of parameters Y, 
managing influences U and adjusting influences W ; 

3. Working out the development program with determination of numer- 
ical values of parameters of conditions Y, management U and correc- 
tions W at each stage ff ; 

4. Processing the current information and decision-making for the choice 
of corrections W; 

5. More precise definition of models of condition and management. 

For realization of the information technology of management of the 
bank condition and development by the risk criterion it is necessary 
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to create the database, including the following structured information 
according to normative documents and standards of the bank: 

• Controlled parameters in n directions of activity and for the bank as 
a whole; 

• Signs and grades of credits of physical and juridical persons and de- 
scriptions of other documents in directions of activity of bank following 
the Western standards; 

• Resources for the directions of activity which can be lost; 

• Admitted risks of non-success; 

• Managing influences (resources, actives, rates); 

• Adjusting influences (resources, actives, rates). 

For calculation of non-success risk on the basis of the LP-approach 
we consistently construct the following special models of risk in banking 
activity directions: 1) the structural non-success risk model; 2) the non- 
success risk L-model; 3) the non-success risk P-model (polynomial). The 
general non-success risk LP-model is constructed of the special non- 
success risk LP-models. The non-success risk special LP-models are 
trained by statistical results of banking operations. 

15.4.2 Total risk LP-model of bank and danger levels 

On the basis of LP-methods, we can estimate the banking risks in the 
following directions of bank activity: crediting of juridical persons, cred- 
iting of physical persons, operations of the type of Technical Analysis, 
security portfolio, investments of projects, and etc. 

We can logically add the risks in directions of bank activity, calculate 
the total banking risk and introduce the bank danger levels by analogy 
with danger levels of a nuclear power plant. 

The graph for calculation of the total bank non-success risk is the 
“node” one (fig. 11.1, a). Variables Zj, Z 2 , ■ ^ , Zn are independent bi- 
nary random events of unsuccessful functioning of bank in directions of 
banking activity, accepting values 1 (non-success) or 0 (success) with 
probabilities: 



P{Zi = l} = Pi, ..., P{Zn = l}^Pn; 
F{Zi =0} = 1-Pi, P{Z„ = 0} = 1 - 
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If El, E 2 , ■ . ■ ^ En are resources in directions of banking activity then 
possible losses in directions of banking activity are equal to: 

Ti = Pi ■ El, T2 = P2 • E2, . . . , Tn~Pn‘ Erl' 

Let us consider estimation of bank instability only according two di- 
rections of its activity, to which events Zi, Z 2 correspond. For example, 
we fix Pi =0.25; P2=0.4; Pi =2.0 million; P 2 = 0.5 million. Following 
conditions Si, 82 ^ S^, S 4 are possible: 

1. P(5i) = P{Zi A Z 2 ) means the success in the first and second 
directions of activity. Probability of the success is equal to: 
p(Si) = (1 - Pi) ■ (1 - P 2 ) = 0.75 • 0.6 = 0.45; 

2. P{S 2 ) — P{Zi f\ Z 2 ) means the non-success both in the first and 
second directions of activity. Probability of the non-success and 
the loss value are equal to: 

P(5'2) = Pi-P2 = 0.25-0.4 = 0.1; 

T(S 2 ) = P{S 2 ) ■ {El + P 2 ) = 0.1 ■ 2.5 = 0.25 million; 

3. P(5a) = P{Zi A Z 2 ) means non-success in the first and success 
in the second directions of activity. Probability of the non-success 
and the loss value are equal to: 

p(Ss) = PI • (1 - P 2 ) = 0.25 • 0.6 = 0.15; 

TiSs) = PiSs) • El = 0.15 • 2.0 = 0.3 million; 

4. P(5'4) — P{Zi A Z 2 ) means success in the first and non-success 
in the second directions of activity. Probability of the non-success 
and the loss value are equal : 

P{S 4 ) - (1 - Pi) • P 2 = 0.75 • 0.4 = 0.3; 

T(54) = P(P4) • E 2 = 0.3 • 0.5 = 0.15 million. 

Events 81 , 82 , 83,84 form the group of incompatible events, that is, 
the sum of their probabilities is equal to 1: P{Si) H- P(p 2 ) + P{Ss) + 
P(S' 4 ) = 0.45 + 0.1 + 0.15 + 0.3 = 1. The total probability of non-success 
of bank is equal to: P = P(52) + Pi^s) + P{S 4 ). After substitution of 
numerical values we obtain: P = 0.1 + 0.15 + 0.3 = 0.55. 

Probability P(Pi VP 2 ) (non-success in the first or second directions of 
activity) is equal to the sum of probabilities of events 82 , 83 , 84 . Calcu- 
lation P{Zi V P 2 ) is used the check the above calculations: P(Zi V Z 2 ) — 
P{Zi) + P{Z 2 ) ■ P{Zi) = 0.25 + 0.4 • (1 - 0.25) = 0.55. The total risk 




Risk LP-models in business 



311 



value of possible losses of bank is equal to: T = T(S 2 ) +T{Ss) + T(S 4 ). 
After substitution we get T — 0.25 + 0.3 + 0.15 = 0.7 million. 

Similar calculations for estimation of the bank total non-success risk 
can be carried out with taking into account all n directions of bank 
activity. The numerical values of the bank total non-success risk P 
and possible losses T allow us to introduce the danger levels of bank 
functioning (levels of instability) both for separate or grouped direc- 
tions of activity and for all the bank as a whole. For each danger level 
the decision on application of beforehand provided managements U and 
corrections W should be made. 



15.5 Scenarios and risk LP-models 

for interaction of banks and companies 

15.5.1 Struggle of building firms for profitable contract 

Let us consider the example using the risk LP-model for estimation of 
risk and efficiency at struggle of two building firms for profitable contract 
with counteraction of the third building firm. 

The building firms A and B would like to get the profitable contract. 
The building firm C can prevent by them. The firm C (event Z 3 with 
probability ps) will enter the struggle for the contract (fig. 15.3). Coun- 
teractions of the firm C can make the firm A (event Z 4 with probability 
P 4 ) and the firm B (event Z 5 with probability ps) to give up their in- 
tentions. If the firm B (event Z\ with probability pi) and the firm A 
(event Z 2 with probability P 2 ) could get the building contract, then the 
profit of the firm A (B) would be F' = 6 million (E = 2 million). 

In the example the initial probabilities Pi,P 2 jP 3 ; • • • are fixed by the 
method of expert estimation, taking into account the external factors 
and the capital of firms A, B and C. There are the inverse connections 
from the nodes Z 5 and Z 4 in this risk model. They define conditions of 
realization of the functions Yi and Y 2 by the elements Z\ and ^ 2 > These 
functions consist in preservation of intentions under counteraction. We 
write down the logic equations separately for the success; 

Ti = ^iAF5; Y2 = Z2AY4-, 

Ys = Zs; Y 4 ^Z 4 AYs; Y,^Z,AYs 
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and for the non-success: 



Yi == V Ys; F2 = ^2 V n; ^3 = ^ 3 ; 

F4-^4VF3;F5-Z5Vy3. 



Let us assume that probabilities of events are as follows: pi = 0.85; 
p 2 = 0.95; ps — 0.7; p 4 = 0.4; p^ = 0.5. Then we obtain the LP-model 
of achievement of the purpose, 

Y = yj V F — A Zs V Z\ A Z^ W Z 2 A Z^ \t Z 2 A Zi^, 

Polynomial of the probabilistic function of purpose achievement is: 

Pc = Pi P3 Qa + P 2 P3 Qa + Pi ?3 + qi P 2 Q3 ~ Pi P 2 P3 Qa Qs = 0.825. 

Let us introduce parameters of efficiency of achievement of three different 
purposes: 

1. = 6, if only the element Zi achieves the purpose (F AY 2 ) 

2. E 2 = 2, if only the element Z 2 achieves the purpose (Pi A Y 2 ) 

3. E 3 = 8, if both elements Zi and Z 2 achieve the purposes (F A F) 




Figure 15.3. Struggle of three civil engineering firms for two expedient orders 








Risk LP-models in business 
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Using the above mentioned scheme of construction of the logic and 
probability functions, probabilities of achievement of these three pur- 
poses are determined; P\ — 0.141; P2 = 0.272; P3 — 0.412. Total effi- 
ciency of achievement of the purposes is equal: 

hU = Pi * Pi + P 2 * -P 2 + * ^3 = 4.271 million. 



15.5.2 Financing of building projects with reservation 

Let us consider the risk LP-model for estimation of risk and efficiency of 
financing of building projects with reservation. In this case the danger 
model or the scheme of functional integrity contains fictitious tops. 

Consider the following situation. The bank A should finance the 
building project 1 (event Zi with success probability pi). The bank 
B should finance the project 2 (event Z2 with success probability P2) 
(fig. 15.4 ). The bank C is in a reserve. The bank C can finance both the 
project 1 and the project 2, but only one project (event P3 with success 
probability ps). The unconditional priority for bank C is the project 1 
(event P4 with success probability p^). Only if the project 1 fails, the 
bank C can finance the project 2 (event P5 with success probability ps). 
Write down the logic equations separately for the success: 

W = Zi; Y2 = Z2; F3 = P3; n - ^4 A (Yi V Y 3 ); 

Y5-P5A(y2VY6),l6- Y3AF4 



P; P3 P2 




Figure 15.4. Financing building projects with reserving 
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and for the non-success; 



Fi = Zi; F 2 = ^2; n = ^3; n = Z4 V Fi A Fs; 

F5-Z5VF2AF6;F6=F3Vy4. 

On this scheme, the node 6 is fictitious. It is used for the graphic descrip- 
tion of the complex logic condition for the reserve mode of maintenance 
of the building project 2 by the bank C. The arches, ending with points, 
represent the conjunctive connections. The arches, ending with arrows, 
represent the disjunctive logic conditions of maintenance of functioning 
of elements. We use the direct and inverse outputs from the node Z 4 , 
designating conditions of realization and non-realization of functions by 
the corresponding element of the system. Let us consider 5 variants of 
the logic functions: 

1 . Realization of at least one building project (y4 V I5) 

2. Realization of neither building project {Y 4 A Fs) 

3. Realization of both building projects (I 4 A Fs) 

4. Realization of only the building project 1 (F 4 A F 5 ) 

5. Realization of only the building project 2 (F 4 A F 5 ) 

Each of the obtained logic functions precisely defines the set of con- 
ditions in which the given criterion is realized. These functions define 
corresponding complex random events; probabilistic functions are the 
sought mathematical models. 

The considered examples show that under complex logic conditions 
and purposes, the numerical estimation of risk of success or non-success 
of organizational systems can also be done by using the risk LP-models. 




Chapter 16 



LOGIC AND PROBABILISTIC THEORY 
OF SECURITY PORTFOLIO RISK 



The logic and probabilistic theory of security portfolio risk {Logic & 
Probabilistic Value- at- Risk) ^ based on arbitrary discrete distribution of 
security yields and not using the normal law of distribution, is proposed. 
The logic and probabilistic functions are suggested, problems of selection 
of an optimal portfolio are formulated and methods of risk analysis and 
forecasting of portfolio risk by the LP-VaR theory are described. 

Characteristics of the optimal portfolio by VaR with analytical de- 
scription of distributions of security yields under the normal law and of 
the optimal portfolio by LP-VaR with the discrete tabular descriptions 
of yield distributions are compared. 

The accuracy of LP-VaR description, depending on the discretiza- 
tion step of security yields and on replacement of the complete set of 
the possible portfolio conditions by a limited set, is investigated. 

16.1 Introduction 

A classical problem of finance management is the problem of investment 
of certain amount of money for certain period of time (horizon of invest- 
ment). In studies of the problem it is assumed that the market permits 
to invest available money to securities of different types. The yield of 
each security is a random value. 

The problem of portfolio optimization was formulated and solved in 
1952 by H. Markowitz, who is one of the founders of the modern portfolio 
theory [5,6]. For those results he later received the Nobel Award in 
economics. Further, the theory of the optimum portfolio was developed 
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as the theory of VaR in papers of many scientists [6,92]. 

In the selection theory of the optimal portfolio by Markowitz, Mar- 
shall, Sharp and others [6,92,93] the law of yield distribution of each 
security was assumed to be normal, defined by the mean value and 
the dispersion; interdependence of security yields is taken into account 
by covariance matrix. Such assumptions result in essential shortcom- 
ings which were mentioned in many publications [6,92-97]. First, this 
is the incorrect definition of the risk, which is not the probability of 
non-success; risk in the above mentioned papers is understood as the 
mean-square deviation of yield of the portfolio from the expected value. 
This leads to discrepancy in the selection of the optimal security port- 
folio when the yield distribution differs from the normal law. Besides, 
there exist limitations of few weeks in the horizon of investment, because 
the law of distribution cannot be considered as the normal law. Oppor- 
tunities of analysis and forecasting of portfolio non-success risk are also 
limited. 

In numerous works in the field of VaR theory of security portfolio, the 
authors investigated “fat” tails of yield distribution of the portfolio [98- 
101]. For this purpose various distributions and condition probabilities 
for “tails” are suggested, which have no rigorous justification. 

All these shortcomings force to look for other approaches and meth- 
ods for the selection, analysis and management of portfolio risk, in par- 
ticular, on a basis of the logic and probabilistic approach [7], which does 
not use analytical distributive laws. The credit risk LP-theory, using 
“standard” data, is shown to be two times more accurate and seven 
times more robust in the classification of credits than other well-known 
methods [7-9,77]. Moreover, the risk LP-models can be of any logical 
complexity to include operators OR, AND, NOT, cycles and repeated 
elements [1,2,59]. It is important for problems of interactions of port- 
folios and projects. 

Basic principles of the considered theory of LP-VaR of non-success 
risk of security portfolio are derived from the logic and probabilistic 
LP-calculus and the LP-methods, discrete mathematics and the num- 
ber theory by Weyl, the theory of security portfolio by Markowitz and 
VaR, the risk LP-theory with groups of incompatible events, non-linear 
optimization and modelling by Monte-Carlo. Algorithmic approach to 
calculations and using of modern computers are very important too. 

Bellow we shall consider the risk LP-theory of the security portfolio 
for two following cases of connectedness of security yields i — 1,2, . . . ,n 
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as random variables: 

1. The random variables are independent, have arbitrary distribution 
laws and are given by discrete series. This case has the great theoretical 
importance for justification of the risk LP-theory of security portfolio. 

2. The random variables are dependent, have arbitrary distribution 
laws and are given by a table of statistical data on security yields in dis- 
crete time k — 1,2, . . . , N. This case has the great practical importance 
for problems of analysis and management of the portfolio risk. 

We have got initial statistical data on stock price. By using the 
data we can construct analytical distribution law of yields (determine 
mathematical means and dispersions), if distribution laws of yields can 
be considered as normal ones. Interdependence of security yields is taken 
into account by covariance matrix. 

If distribution laws of yields cannot be considered as normal ones, 
then we should avoid construction of analytical distribution laws of yields 
and their covariance matrix and use the table of statistical data, which is 
clearly the most natural approach to specify both arbitrary distribution 
laws of yields and arbitrary interdependence between them. 



16.2 Selection of the optimum portfolio by VaR 

At first, let us consider the traditional method of the portfolio selec- 
tion on VaR. Yields of security portfolio R\, . . . , Rj, . . . , Rn are random 
values with the normal distribution laws, defined by their mean val- 
ues -Rim) • • ‘ ) Rjrrii • • • > -Rnm and dispersions. The portfolio yield Ry, as 
the function of random variables R\, . . . , Rj, . . . , Rn^ is also the random 
variable, determined by the mean value Ryrn and dispersion (the index 
“y” belongs to the parameters, which are output ones). An yield dis- 
tribution of the portfolio Ry is described by many-dimensional function 
of a normal distribution with covariance matrix of the random yields 
R \ , . . , , Rj , , Ryfi , 

The problem of the portfolio selection is to find optimal values Xj, 
j = 1, 2, . . . , n of the capital, invested in securities. The VaR-method of 
the portfolio selection uses the criterion of affordable losses (drawdown 
criteria) [5,6,105,106]. It is the typical case of the investor who tries to 
avoid risk. 
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Table 16.1. Initial data of securities 



Order number 


Yearly rate 


Standard deviation 


of security 


of yield, Rjm\ 


of yield, cij 


1 


12% 


1% 


2 


13% 


2% 


3 


12% 


1% 


4 


14% 


1% 



The mean yield of the portfolio is determined from the expression: 

n 

j=l 

where the restriction is imposed on the parameters Xj, j = 1, 2, . . . ,n: 

n 

(16.2) 

3 = 1 

The optimal portfolio is determined from the condition of the maximum 
of the admitted yield of the portfolio: 

Rad = Rym ~ ha ’ (J max (16.3) 

or taking into account that VaR=ha • cr, we have 

Rad - Rym - VaR max, (16.4) 

where Rym^Rad the expected and admitted yields of the security 
portfolio respectively, ha is the number of standard deviations in the 
quantile of the order a (level of trust); for example, for the level of trust 
a=0.95 (95%) the value /ia=h65; and for o:=0.99 the value ha=2.33] a 
is the standard deviation of yield of the portfolio, VaR means possible 
losses. Hereinafter, instead the level of trust we use Risk = 1 - a. 

Initial data for the problem of the portfolio structure optimization 
are the list of securities, which can get to the portfolio, their expected 
yields and standard deviations from the mean values for each security. 

Example 1. In Table 16.1 the parameters of four securities [105, 
106] are given. For simplicity it is assumed that yields of securities are 
independent; then the factors of correlation pjk = 0 for j / A:, and 
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Table 16.2. Optimum structures of portfolios by VaR 



Parts of securities 


Optimization by VaR 


Trust level, Risk — 0.05 


Trust level, Risk = 0.01 




0.0 


0.075 


^2 


0.087 


0.103 


! 


0.0 


0.077 


X4 


0.913 


0.745 



Table 16.3. Parameters of optimum portfolios by VaR 



No 


Optimization 


Expected 
yield of 
portfolio 
Rym 


Standard 
deviation 
of yield, 

(7p 


Admitted yield 
of portfolio 
Level of trust 
Risk = 0.05 


Admitted yield 
of portfolio 
Level of trust 
Risk = 0.01 


1 


By VaR, 
Risk = 0.05 


13.91% 


0.93% 


12.38% 


_ 


2 


By VaR, 
Risk — 0.01 


13.59% 


0.78% 


- 


11.77% 



Pjj ~ 1. Results of calculations are given in Tables 16.2 and 16.3. 

The obtained results demonstrate the properties of diversification 
of the portfolio. The expected yield of the portfolio is placed between 
maximal and minimal yields of securities. The portfolio variation is less 
than the least variation of securities. The readiness of the investor to 
risk is determined in the terms of VaR, namely, by Risk. The less Risk, 
the less the tendency of the investor to risk. 



16.3 Selection and analysis of the optimal 
security portfolio by LP-VaR 

The LP-VaR theory of the security portfolio uses properties of GIE. 
In the risk theory based on GIE, every event has several outcomes or 
so-called grade-events. The logic and probabilistic theory of non-success 
risk with groups of incompatible events GIE was considered in Chapter 
10 and in works [7-9]. In the risk LP-theory in classification problem the 
grade-events are given and their probabilities are unknown. In the LP- 
VaR theory the grade-events for each security are introduced and their 
probabilities are easily calculated. The risk LP-theory with GIE for the 
classification problem and for the invest theory mainly distinguish in the 
way of optimization problem statement and it resolving. 

Quantization of yield. Let us introduce for the investment prob- 
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Table 16. 4. Conditions of securities and portfolio 



Conditions 

i 


Security 1, 
Yield 
Ri 




Security j. 
Yield 
Rj 




Security n, 
Yield 
Rn 


Portfolio, 

Yield 

Ry 


1 


































Rjr 






















N 















lem risk (as in the problem of classification) the GIE and concepts of 
sign-events and grade-events for the portfolio risk problem [7,8]. 

The yields i?i , . . . , , . . . , correspond to securities j ~ 1, 2, . . . , n. 

In order to come to discrete distributions, we split ranges of yield change 
of securities to intervals i?j>, which can be identical or different. In gen- 
eral the numbers of intervals in splitting of yields of different securities 
Nj are different. The numbered intervals for each security are consid- 
ered as grades of the security conditions r = 1,2, ... ,Nj. That is, the 
intervals correspond to random grade-events forming GIE and the sum 
of probabilities of grade-events in GIE is equal to 1. 

We will present statistical data by yields of securities in Table 16.4, 
which is the modification of Table 10.1. Namely, the last column Ry, 
being the yield of the portfolio, is not given, and it will be calculated. 

Logic. The maximal number of combinations (different conditions 
of the portfolio) on yields is given by (10.1). The logic function for 
possible conditions of the portfolio in the perfect disjunctive normal form 
PDNF [2,7] is given by (10.5). Every condition of security portfolio of 
the possible N conditions is determined by the logic function (10.6). 

The logic functions for two different conditions of the portfolio are 
orthogonal (10.7), because Zjr and Zjr+i belong to the same GIE. The 
property of the orthogonality of the logic terms in the risk L-function 
(10.5) allows us to tern from L-functions to algebraic functions. 

Probabilities and yields. The probability of the grade-event r in 
the security-event j is equal to (see also (10.5)) 

Pjr = P{Zjr = l}, j = l,2,...,n; r= 1,2,...,7V,, (16.5) 



where Zjr are random events or logic variables, corresponding to Rjr 
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The mean yield of security j, as a random value, is as follows: 



Nj 

Rjm = ^2 (16.6) 

r=l 

The yield of any condition i of the portfolio is equal to the sum of 
corresponding weighted yields included in it: 

Ryi — X\R\J^ -f . . . -f XjRjj. XnRnJn\ i = l,...,A/’. (16.7) 

The probability of any condition i of the portfolio is equal to: 

Ryi — P\Ji ' R 2 J 2 • • • • ‘ RjJj * • • • • PnJn') ^ “ 1)2,..., N. (16.8) 

In (16.7) and (16.8) indexes Ji^ . . . , Jj, . . . , Jn belong to followings 
sets of values 



Ji€{1,7Vi}; Jye{l,Nj}; J„G{l,iV„}. (16.9) 

That is, for each security in (16.7) and (16.8) yields and probabilities 
for its grade in the condition i are presented. 

The obtained probabilities of conditions of the portfolio Pyi should 
be normalized, because not all possible conditions of the portfolio (10.1) 
are taken into account. After normalization, the following condition 

N 

= l (16.10) 

i=l 



holds. 

The mean value of the yield of the security portfolio is equal to; 

N 

Rymi ~ Y,Ryi-Pyi- (16-11) 

i=\ 

The above mentioned formulas are also valid if the portfolio contains 
one non-risk security with the yield Rq and the zero dispersion. Such 
security is given by one interval only; the yield is equal to Rq and its 
probability is equal to Pq = 1- 

Selection of the optimal portfolio by LP-VaR. Let us for- 
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mulate the problem of selection of the optimal portfolio by VaR with 
discrete distributions of yields, not using concepts of dispersion and co- 
variance matrix of securities. On the yield scale of the portfolio (fig. 16.1) 
we can indicate the admitted yield Rad which corresponds to the risk 
(Risk). 

We shall determine the optimal portfolio by the algorithmic method. 
As the criterion functions, the expression for the admitted yield is used 

Rad max, (16.12) 

where Rad is the admitted yield for the given risk (Risk = 0.05 or 
Risk = 0.01 as in the previous examples) . 

As the unknowns we consider the parts of securities in the portfo- 
lio Xj, submitted to restriction (16.2). We shall solve the problem of 
optimization (16.12) by algorithmic method in the following sequence: 

1) Setting initial values of a:i, . . . , iCj, . . . to satisfy restrictions (16.2); 

2) Calculation of yields Ryi of all conditions of the portfolio (16.7); 

3) Calculation of probabilities Pyi of all conditions of the portfolio from 
(16.8); 

4) Calculation of the admitted yield Rad of the portfolio for given Risk^ 
using the following formula of interpolation (10,18) (see also fig. 10.2); 

5) Generating new values xi, . . . , to satisfy the condition (16.2); 

6) Calculation of the new value of the admitted yield Rad for the given 
risk Risk using the above algorithm steps, starting from no, 2; 

7) If the criterion function (16.2), the admitted yield Rad, appears higher 




Distribution 

function 



Risk 



Rad 



Yield, % 



Figure 16.1. Distribution of the portfolio yield 
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than the previous one, the value x is considered as the optimum x*, we 
remember it and continue the process of optimization; 

8) If the new value of the criterion function is less than previous one, we 
generate the new value x and continue calculations; 

9) The process of optimization should be repeated Nopt times {Nopt is a 
given number). 

We note that the similar scheme can be used for the algorithmic 
resolving of the associated optimization of the portfolio structure in 
which the portfolio admitted yield Rad is given, and the risk Risk is to 
be minimized: 



Risk min. (16.13) 

Determination of the admitted yield of the portfolio Rad- 

Calculation of of the admitted yield of the portfolio Rad for the given risk 
Risk is a complex algorithmic problem. In Chapter 10 we consider three 
different methods of its solution: the methods of interpolation, sorting 
and bisection. At algorithmic realization of the mentioned methods of 
calculation of the admitted yield Rad^ we should take into account the 
following property of integer numbers, investigated by G.Weyl [42, 104]. 

The yield distribution of the portfolio in each interval, which it is 
broken, can have one value only, if Xj ~ 1 and other Xj are equal 
to zero, otherwise the yield can have many different values. From 
the known Weyl’s theorem about the remainder at division of inte- 
gers, it follows that we will have different values of the portfolio yield 
with probability 1 in the interval. Variety of the values can be wide. 
The number of different values of the portfolio yield in one interval 
depends on multiplicity of xi, X2 , . . . , (we can turn them into in- 
tegers and find out the maximum common divisor). For example, if 
x\ — X 2 ~ = X4 = 0.25, then in one yield interval there are only four 

different yields (100/25 = 4 where 100 is the sum of x). If the values 
of the parameters are xi = 0.1; X 2 = 0,2; 0:3 = 0.3; a?4 = 0.4, then in 
one yield interval there are only ten different yields (100/10 = 10). If 
xi = 0.11; X 2 = 0.17; X 3 = 0.19; X 4 ~ 0.4, then in the yield interval 
there are 100 different yields (100/1 = 100). Number of different yields 
increases as the number of digits behind the decimal grows. At the algo- 
rithmic method of resolving the optimization problem for the portfolio, 
we can accordingly choose steps of increment of xi,X 2 , ... ,Xn 

Risk analysis and forecasting by LP-VaR. Let the optimal 
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portfolio be constructed and the stock parts x\^ . . . . . . ,Xn, invested 

in each security 1, 2, . . . ,n, be known. The portfolio analysis is fulfilled 
by LP-VaR using the algorithmic method on a computer by calculat- 
ing contributions of grade-events into “tail” which can be considered as 
conditional probabilities [91]. 

In the corresponding formula (10.19), contributions of grade-events 
of securities to the portfolio admitted yield Rad are equal to 

Djf — Njj- 1 Nad) i ~ I) 2, . . . , fi; r = 1, 2, . . . , Nj , 

where Nad and Njr are the numbers of all conditions of the portfolio 
and of conditions of the portfolio with grade r of security j, satisfying 
the condition (10.20) 



^ad- 

In the corresponding formula (10.21), contributions of grade-events to 
the admitted risk Risk in “the tail” are as follows: 

Cjr — Pjr/R'isk, j = l,2,...,n; r = 1, 2, . . . , 

where Pjr is the summary probability of conditions of the portfolio with 
grade-event r of security satisfying the condition (10.20). 

On the basis of the given above expressions, contributions of the 
group of grade-events for one or a few different securities [2,7,59] can be 
calculated. Grades or their groups, having the greatest contributions, 
are the best indicators, showing opportunity of financial loss for a client. 



16.4 Investigation with independent random 
yields 

Security yields i = 1, 2, . . . , n are considered as random dependent vari- 
ables, which have arbitrary distribution laws and are given by a table of 
statistical data on yields of securities in discrete time z = 1, 2, . . . , V. In 
this case we will consider all possible conditions of portfolio (10.1). This 
case has the great theoretical importance for clarification of properties 
of the problem of security portfolio risk. The admitted portfolio yield 
Rad because of the great number of portfolio conditions (N ^ 100000) 
is determined by the method of linear interpolation. 
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5.5 6.5 7.5 8.5 9,5 10.5 11.5 12.5 13.5 14.5 15,5 16.5 17,5 18.5 19.5 20.5 



Figure 16.2. Discrete normal distribution laws of the security yields 1, 2, 3 and 4 and 
the portfolio at xi = X 2 = xs = X 4 = 0.25; R = 0.5%; Rad = 11.35%; Risk = 0.05 



Table 16.5. Results of researches by VaR and LP~VaR with normal distribu- 
tions 



Variants 


Xi 


X 2 




X4 


Step 

AR,% 


Risk 


kfym^ 

% 


Radi 

% 


Comment 


1-1 


0.0 


0.087 


0.0 


0.913 


- 


0.95 


13.91 


12.38 


VaR 


1-2 


0.0 


0.084 


0.0 


0.916 


0.5 


0.95 


13.92 


12.08 


LP-VaR 


2-1 


0.075 


0.103 


0.077| 


0.745 


- 


0.99 


13.59 


11.77 


VaR 


2-2 


O.O 8 I 1 


0.083 


0.080 


0.757 


0.5 


0.99 


13.591 


11.46| 


LP-VaR 



Normal discrete distributions. Let us solve the problem of se- 
lection of the optimum portfolio by LP-VaR, by using the data on four 
securities with the normal laws of distribution of yields (Table 16.1) 
from [105], [106]. 

We replace the analytical normal distributions of yields of securities 
by discrete distributions with the interval 0.5%. 

The obtained discrete distributions of yields for the securities and 
the portfolio are presented in fig. 16.2. The probability values Pr for the 
portfolio are calculated by (10.13) at xi = X 2 — xs = X 4 , — 0.25 and 
are shown by points of different type at middle points of intervals. For 
convenience the points are connected by lines. 

The problem of selection of the portfolio optimal structure with the 
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Figure 16.3. Discrete non-normal distribution laws of the security yields 1, 2, 3 
and 4 and the portfolio at xi = X 2 = xs = xa ~ 0.25; R ~ 1.0%; 

Rad = 10,74%; Risk ~ 0.05 



criterion function (16.12) is solved using different steps of quantization 
AR — 0.5% for Risk — 0.05 (Var. 1 - 1 , 1-2), and for Risk ~ 0.01 
(Var. 2-1, 2-2). The results, given in Table 16.5 for the parameters 
2 ^ 1 ) 2 ^ 2 , 3 : 3 , X 4 , and the mean Mym and admitted Rad yields of the port- 
folio, confirm close coincidence of solutions obtained using the discrete 
distributions and analytical normal distributions yields of securities and 
the portfolio. 

Non-normal discrete distributions. Let us solve the problem 
of selection of the optimal portfolio by the method of LP-VaR, when 
the classical VaR can not manage it. We use arbitrary non- normal 
discrete distributions of yields for four securities (fig. 16.3). The discrete 
distribution of the portfolio yield is constructed at x\ — X 2 ~ X 3 — X 4 — 
0.25. The diagrams are shown by points of different type for the middle 
points of intervals. For convenience the points are connected by lines. It 
is notable that the distribution of the portfolio yield is visually similar to 
the normal one. It is quite natural, for the distribution is constructed on 
vast quantity of different orthogonal conditions of the portfolio (16.1). 

The problem of selection of the optimum structure of the portfolio 
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Table 1 6. 6. Results of investigation by LP- VaR with non-normal distributions 



Variants 


Xi 


X2 


X3 


X4 


N opt 


Step, AR, % 


a 


Mpi,% 


Rad%, 


1-1 


0 . 649 j 


0.018 


0.333 


0.0 


80 


1.0 


0.95 

1 


17.535 


12.621 


2-1 


0.589 


0.116 


0.294 


0.0 


90 


1.0 


jO .99 


17.206 


10.358 



with the criterion function (16.12) is solved with steps of quantization 
Ai? = 1% both for Risk = 0.05 (Var. 1-1) and Risk = 0.01 (Var. 2- 
1 ). The solutions given in Table 16.6 for the parameters xi, X 2 , X 3 , 0 : 4 , 
and the mean Rym and admitted Rad yields of the portfolio, confirm 
the efficiency of the proposed LP-theory of selection of the optimum 
portfolio with use of discrete non-normal distributions of security yields 

The portfolio yield distribution. Discrete distribution of the 
portfolio yield Ry is constructed on computer, by calculating the number 
of conditions of the portfolio Nj, located in interval j. In the case 
when we apply quantization of the normal distributions of security yields 
(fig. 16.2) for xi = X 2 = X 3 = X 4 = 0.25 and for the total number of 
conditions of the portfolio N = 97 875. The normal law can coincide 
with the law of the distribution of the yield of one security if Xj = 1 and 
the other x are equal to zero. 

Analysis of security portfolio. Let the optimal portfolio be con- 
structed and fixed parts of capital xi, . . . ,Xj, . . . , x^ investigated into 
securities l,2,.,.,n, be known. For analysis of the portfolio risk, we 
will calculate contributions of grade-events in the “tail” of distribution 
of the portfolio yield from the above equations by analogy with (10.19), 
(10.21) (Table 16.7). 

Calculations are fulfilled for the case of the normal laws distributions 
of the security yield (Table 16.1 and fig. 16.2) for the optimum portfolio 
with xi = 0.075; X 2 ~ 0.103; X 3 = 0.077; x^ ~ 0.745 at Risk — 0.01. 
Contributions of grade-events Cjr and Djr change differently. If the 
contribution of grade-events Djr into the yield Rad is a monotone de- 
creasing function of the yield, then the contributions of grade-events Cjr 
in Risk have points of extreme inside intervals. The most dangerous are 
contributions Cjr and Djr of the first three grades of the yield of the 
fourth security. 

The total number of conditions of the portfolio, which get in “the 
tail” under the condition Ry < Rad, is equal to Nad = 17208 of condi- 
tions of the portfolio. If we assume that x\ — 0.21; X 2 — 0.2; 0:3 = 0.21; 
X4 = 0.38, then for Risk = 0.01 we have Nad — 10248 conditions of the 
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Table 16.7. Contributions of grade-events of different securities to the “tail” 



r 


Ri = Rs ,% 


Cir ~ Csr 


Dir ^ Dsr 


R 2 ,% 


C2r 


T>2r 


R 4 , % 


C'4r 


D4t 


1 


8.5 


0.0010 


0.0845 


6.0 


0.0016 


0.0565 


10.5 


0.044 


0.361 


2 


9.0 


0.0045 


0.0819 


6.5 


0.0036 


0.058 


11.0 


0.214 


0.295 


3 


9.5 


0.0158 


0.0793 


7.0 


0.0058 


0.0559 


11.5 


0.513 


0.202 


4 


10.0 


0.0432 


0.0767 


7.5 


0.0102 


0.0541 


12.0 


0.221 


0.108 


5 


10.5 


0.0913 


0.0741 


8.0 


0.0181 


0.0527 


12.5 


0.008 


0.031 


6 


11.0 


0.1502 


0.0715 


8.5 


0.0287 


0.051 


13.0 


0.0000 


0.002 


7 


11.5 


0.1918 


0.0688 


9.0 


0.0453 


0.049 


13.5 


0 


0 


8 


12.0 


0.1927 


0.0665 


9.5 


0.0639 


0.047 


14.0 


0 


0 


9 


12.5, 


0.1533 


0.0641 


10.0 


0.0745 


0.045 


14.5 


0 


0 


10 


13.0 


0.092 


0.0618 


10.5 


0.0886 


0.0437 


15.0 


0 


0 


11 


13.5 


0.0429 


0.0593 


11.0 


0.0869 


0.0414 


15.5 


0 


0 


12 


14.0 


0.0155 


0.0566 


11.5 


0.0954 


0.0398 


16.0 


0 


0 


13 


14.5 


0.00436 


0.0541 


12.0 


0.1017 


0.0391 


16.5 


0 


0 


14 


15.0 


0.0009 


0.0515 


12.5 


0.0955 


0.0383 


17.0 


0 


0 


15 


15.5 


0.0002 


0.0491 


13.0 


0.0882 


0.0361 


17.5 


0 


0 


16 








13.5 


0.0664 


0.0348 








17 








14.0 


0.0462 


0.0326 








18 








14.5 


0.0322 


0.0305 








19 








15.0 


0.0186 


0.0292 








20 








15.5 


10.0125 


0.0269 








21 








16.0 


0.0078 


0.0256 








22 








16.5 


0.0043 


0.0239 








23 








17.0 


0.0023 


0.0217 








24 








17.5 


0.0009 


0.0203 








25 








18.0 


0.0004 


0.0180 








26 








18.5 


0.0002 


0.0161 








27 








19.0 


0.0001 


0.0147 








28 








19.5 


0.0001 


0.0125 








29 








20.0 


0.0000 


0.0097 









portfolio. Accordingly, during the optimization of structure of the port- 
folio the number of the conditions of the portfolio in “the tail” increases. 
And, so, the criterion function of the optimization of the portfolio for a 
given risk Risk can be as follows: 



Nad iiiax . (16.14) 

The risk estimation of the current condition of the portfolio is done in 
the following way. By using current security yields Ru , . . . , Rji , . . . , Rni^ 
we calculate the yield of the portfolio R under the formula (16.7). Using 
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the tabular data Ryr^ Pyr-> Fyr, r = 1,2, , ,Np, we calculate Risk for 
Ry by the interpolation method. 

We can use the same table for all portfolio conditions Ry^Py^Fy both 
for estimation the current portfolio risk and forecasting the portfolio risk 
by prognostic values of i?i, , . . , . . . , 

Step of quantization. The value of quantization step /\Rj or the 
grade number Nj for the yield of each security and for the whole portfolio 
influences the accuracy of calculation of the mean value Rym and the 
admitted Rad yields of the portfolio and parameters X\^X 2 , ■ ^ • ,Xn of the 
optimum portfolio . 

In Table 16.8 results of calculations of the mean yields of securities 
Rim, P2m, Psm, R4m and the portfolio Mp, and also of the admitted 
yield Rad are given for Risk — 0.05 and xi = X 2 = xs = X 4 ~ 0.25. For 
the normal distributions the quantization step of the securities yield is 
ARi — 0.5%, and that of the portfolio is AR ~ 0.5% and AR = 0.1% 
(fig. 16.2). For the used non-normal distributions the quantization step 
of the securities yield is ARi = 1%, and that for the portfolio is AR — 
1% and AR = 0.25% (fig. 16.3). The mean yield of the portfolio is 
estimated by different ways: Rymi, Pmy2 and Rym?,' 

It is easy to see that the quantization step has strong influence on 
the accuracy of calculation of the admitted yield Rad, and thus, on the 
optimal values of parameters X\^X 2 , 2 : 3 , X 4 . On the other hand, this step 
slightly influences accuracy of calculation of the mean yield of securities 
and the portfolio. From the fact it follows that the step of quantization 
should be chosen in such way as to satisfy the prescribed accuracy of 
calculation of Rad- 

Decreasing the step of quantization of the security yields increases 
the accuracy to determination of parameters x, Rad, Pym- The quantiza- 
tion step should be chosen identical for all securities to avoid systematic 
mistake due to features of the yield distribution in intervals according 
to WeyPs theorem. 

Reduction of computing complexity. Let us obtain a limited 
number of random combinations by modelling of Monte- Carlo’s method 
and calculate the mean credit risk Pm (Table 16.9). The logic and 
probabilistic model of credit risk [7-9] is trained on statistical data for 
N == 1000 credits; the general number of the possible different credits is 
equal to the astronomical number N ^ 6 “^^. The convergence of the mean 
risk to the true value is observed as the number of credits increase. The 
difference of the mean risk at = 1000000 and N = 10000000 is less 
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Table 16.8. Influence of the quantization step on the accuracy 



Charac- 

teristics 


Analyt- 

ical 

normal 
law distri- 
bution 


Normal 

distribution. 

Step of 
quantization 
AR = 0.5% 


Normal 

distribution. 

Step of 
quantization 
Ai? = 0.1% 


Non-normal 

distribution. 

Step of 
quantization 
AR = 1% 


Non- normal 
distribution. 

Step of 
quantization 
AR = 0.25% 


-Rim, % 


12.0 


12.0 


12.0 


16.924 


16.924 


-R2m, % 


13.0 


13.0 


13.0 


13.587 


13.587 


-Rsm , % 


12.0 


12.0 


12.0 1 


19.256 


19.356 


i?4m, % 


14.0 


14.0 


14.0 


11.91 


11.491 


Ryml , 9o 


12.75 


12.75 


12.75 


15.314 


15.3146 


Rym2i % 


- 


12.75 


12.75 


15.254 


15.379 


Rym3 5 % 


- 


12.75 


12.75 


15.314 


15.314 


Rad, % 


- 


11.352 


11.599 


10.74 


11.32 



Table 16.9. Dependence of the mean credit risk on the number of combinations 



The number of credits. 
Modelling by Monte-Carlo’s method, N 


The mean risk, Pm 


1000 


0.31068294 


10 000 


0.310227415 


1 000 000 


0.31001605 


10 000 000 


0.309964338 



than 0.0001. It may be possible to limit our calculations by = 10000 
objects only, because for this number the difference of the mean risk 
from the true value is approximately 0.0002. The success is determined 
by usage of the risk probabilistic polynomial, constructed on the risk 
orthogonal logic function with taking into account the GIE (groups of 
incompatible events). 

The same situation takes place in the experiment by optimum plan- 
ning theory, where the experiments are carried out with values of vari- 
ables on a sphere, at points where the sphere is crossed by orthogonal 
axes of coordinates for each variable. Therefore it is possible to perform 
only limited number of experiments, corresponding to fractional replica. 

Let us obtain a limited number of random combinations of the se- 
curity portfolio by modelling Monte-Carlo’s method and calculate for 
them the characteristics of the portfolio for Risk = 0.05: the admitted 
Rad and the mean Rym yields. The distribution yields under the normal 
law (fig. 16.2) for x\ — X 2 — X 2 > — — 0.25 and x\ =0.11; X 2 = 0.17; 

X 3 = 0.19; X 4 = 0.53 are used. The results of calculations given in Table 
16.10, confirm that considering limited number of random conditions of 
the portfolio can be effective for obtaining sufficiently precise complete 
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Table 16.10. The portfolio characteristics and the number of combinations 





Xi=z X2= X3 


= 0:4 = 0.25 


Xi=0.ll', X2 = 


0.17; 0 : 3 = 0 . 19 ; o:4=^0.53 


N comb 


Rad 


My m2 


RymS 


Rad 


Mym2 


Rym3 


10 000 


10.837 


12.323 


12.753 


11.330 


12.737 


13.233 


50 000 


10.942 


12.327 


12.753 


11.363 


12.757 


13.233 


All 


10.957; 


12.324 


12.753 


11.322 


12.745 


13.233 



picture of distribution of the portfolio yield. 

Dynamics of the optimization process with LP-VaR is shown 
in fig. 16.4. The computation is made for: Risk = 0.01 with the initial 
values xi = 0.21; X 2 — 0.2; x^ ~ 0.21; x^ — 0.38. The value Risk* is 
calculated after the linear interpolation for checking accuracy of calcula- 
tion of Rad on Risk. It is easy to see that starting from certain number 
of current optimization Ncur the criterion function Rad does not change. 

The admitted yield Rad and the number of the portfolio conditions 
Nad in the “tail” for a given value of Risk are connected by monotonic 
dependence (fig. 16.4) on the basic trajectory of optimization. It shows 
that both criterion functions (16.12) and (16.14) can be used to find 
optimal portfolio structure. The deviation from monotony on the initial 
trajectory of optimization can be explained by inaccuracy of calculation 
Rad, ^ad and Risk by the method of linear interpolation. 




Rad 



Figure 16.4. Connection of the admitted yield Rad and the number of conditions 
Nad in the “tail” during the optimization process 
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Table 16.11. Optimal solutions for case of dependent security yields 



N 


Rad, % 


Xi 


X2 




^4 


300 


14,147 


0,443 


0,0 


0,206 


0,351 


1000 


14,213 


0,376 


0,0; 


0,268 


0,356 



16.5 Investigation with dependent random 
yields 

We generated the table “Security conditions” (Table 16.4) for four se- 
curities with distributions of yield, similar to fig. 16.3. In the table we 
put down N ~ 300 or = 1000 security conditions with yields, which 
change in the range 4-30%. Yields are generated randomly with step 
1%. By using formula (10.2) probabilities of grade-events (intervals) for 
all conditions N are calculated. 

On every step of optimization of the portfolio structure for known x 
we calculate the portfolio yields for all conditions N by formula (16.7) 
and probabilities by (16.8). Then we sort all portfolio conditions by the 
yield Ryi with memorizing corresponding probabilities Pyi. After that, 
going down from the minimal yield, we sum probabilities of conditions 
of the portfolio until the following condition is true 

N 

< Risk. (16.15) 

For given risk Risk (for example 0.05) the minimal admitted yield Rad 
corresponds to the last term. Maximization of Rad at given Risk is real- 
ized by the method of the small increment by the gradient sign dRad/d^i- 
The optimal values x and Rad at Risk = 0.05 are obtained in result (Ta- 
ble 16.11). 

The portfolio structure is also optimized on a base of “historical” 
approach, in which the number of portfolio conditions, corresponding to 
the given risk, is as follows 



Nad = Risk -N. (16.16) 

After sorting portfolio conditions in increasing yield, from the top we 
calculate Nad conditions of the portfolio; the last condition corresponds 
to the admitted yield Rad- Maximization of Rad at given Risk is realized 
by the method of the small increment by the gradient sign dRadIdxi. 
The optimal values x and Rad at Risk = 0.05 are obtained (Table 16.12). 
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-»-X1=0.375,X2=0,>C3=0.26B,X4=0.357 -HB--X1=X2=X3=X4=0.25 [ 



Figure 16.5, Change of distribution of the portfolio yield during optimization 



Discussion. In the LP-VaR theory and the “historical” approach, 
the security portfolio yield is calculated with usage of the same formula 
in function x. Difference is in calculation of probabilities of portfolio 
conditions. In the LP-VaR the probabilities Pyi are calculated by fre- 
quency of appearance of grade-events in Table 16.4 and do not depend 
on X. The value of Rad depends on x and Pyi at the given risk Risk. In 
“historical” approach Rad depends only on x. 

Distributions of portfolio yields at the fixed x by the LP-VaR and 
“historical” approach do not coincide and appreciably differ. Change 
of distribution of the portfolio yield by the LP-VaR for initial values 
x\ ~ X 2 — X 2 > = xa = 0.25 and optimal values x\ = 0,375; X 2 = 
0.0; 2:3 = 0.268; 2:4 = 0.357 are shown in fig. 16.5. It is obvious that 
the process of optimization move the distribution to the left and there 
appears the “fat tail” . The qualitatively similar picture is shown for the 
“historical” approach too. 



Table 16.12. Optimal solutions in case of dependent security yields by ‘‘histor- 
ical” approach 



N 


Radi % 


Xi 


2^2 


X 3 


X 4 


300 


12,128 


0,346 


0,059 


0,274' 


0,321 


1000 


12,028 


0,362 


0,062 


0,26h 


0,315 
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Conclusion 

1. The risk logic and probabilistic theory of the security portfolio {Logic 
& Probabilistic Value- at- Risk), by using arbitrary yield discrete distri- 
butions of securities, is proposed, that allows us to overcome a number 
of restrictions of the classical VaR and to solve new problems of the 
analysis and forecasting of the portfolio risk. 

2. The basic logic and probabilistic risk functions of the LP-VaR 
for the cases of dependence and independence of securities yields are 
presented. 

3. The optimization problem of the portfolio is formulated with the 
following different criterions: the maximum of the admitted yield Rad 
for the given risk Risk; the minimum of the Risk; the given admitted 
yield Rad] the maximum of the number of the portfolio conditions Nad 
in “tail” for the given Risk; 

4. The methods of the risk analysis and forecasting of the portfolio 
under contributions of grade-events of the security yields to the admitted 
yield and the risk of the portfolio are proposed. 

5. It is proved that the accuracy of characteristics of the optimal 
portfolio by VaR at the analytical descriptions of security yield distribu- 
tions under the normal law and by LP- VaR at the discrete descriptions 
of security yield distributions is the same, though the LP-VaR can be 
used for arbitrary security yield distributions. 

6. Investigation on accuracy by the LP-VaR is done; one needs to 
choose the identical step of security yield quantization for all securities 
and the portfolio depending on the necessary accuracy of calculation 
of the portfolio admitted yield; the step of quantization of the portfo- 
lio yield should be taken 2-3 orders less when linear interpolation for 
computing of Rad based on value of Risk is used. 

7. The possibility is shown of replacement of complete set of the 
portfolio possible conditions by a limited set obtained by Monte-Carlo’s 
method from all the possible conditions of the portfolio or by using the 
statistical data of the table “Conditions of securities and the portfolio” . 




Chapter 17 



RISK LP-MODELS IN ENGINEERING 



In the present chapter we shall consider some examples of modelling, 
analysis and management of risk in structural-complex systems (CS) in 
various areas of engineering. We consider that examples are not less 
instructive, than the theory. 

17.1 Explosion in a submarine: scenario and 
risk LP-model 

A complex system (CS) can consist of equipment, sensors, computers, 
programs, instructions and actions of personnel, including management, 
testing, repair and service. We consider examples of construction of risk 
LP-models of CS in which risk elements are actions of personnel too. 
In this section we study modelling, estimation and analysis of explosion 
risk in the storage-battery tank of the submarine [2] . 

It is known that for prevention of the explosion of the mixture of 
air and hydrogen, evaporating from the batteries, a number of special 
precautions are taken. The intensity of gasing from the battery depends 
on a mode of its usage, service life, temperature of environment, etc. 
Hydrogen is eliminated by the system of ventilation or by burning in 
special devices. The concentration of hydrogen in the atmosphere of the 
room is constantly supervised by automatic and portable gas analyzers. 

Explosion will necessarily occur (fig. 17 . 1 ) if the explosive concen- 
tration of hydrogen is achieved due to failure of ventilation (initiating 
conditions Z4-Z7) and control of hydrogen concentration (initiating con- 
ditions Z1-Z3), and due to the presence of source of fire (initiating con- 
ditions Zg-Zio). 
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Zi Z2 Z3 Z4 Z5 Zfi Z7 Zs Zg Zio 



Figure 17.1. The scenario of the dangerous state 



The scenario of the dangerous condition is shown in fig. 17.1. Draw- 
ing up such scenario is a creative part of safety analysis, the most difficult 
and non-formalizable one. In the given concrete case as the dangerous 
condition we understand the explosion of hydrogen in the room where 
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the storage battery is placed. Such explosion can result (and resulted 
repeatedly in practice) in destruction of personnel and objects, that is, 
in a damage of big scale. 

The philosophical problem of uniqueness and completeness of safety 
research raise two questions: 

1 ) Will the specialists give the unique interpretation of ways the 
system gets to the dangerous condition? 

2 ) Will all circumstances, leading to explosion, be taken into ac- 
count? 

In our opinion, positive answers to these questions can be given with 
organizing role of mathematics of the LP-methods and pragmatic as- 
signment of scales of the system under consideration (i.e. the account of 
all circumstances only within the limited volume and limited resources) . 

When it is wished to obtain as many as possible concrete recom- 
mendations on active protection of system to avoid getting in a dan- 
gerous condition, it should not be thought that the purpose is reached 
only by account of as many as possible initiating conditions. Movement 
from small to big, i.e. from minimal number of taken into account condi- 
tions ( “core” of system) to consideration of the additional circumstances 
added to the “core” is more correct. In our example it would be possible 
to attribute to the “core” of system only conditions Z4, Z5, Ze, Z7, and 
then to recollect other Zi. There is opportunity of generalized inter- 
pretation of both mistakes of people (Zj) and ways of infringement of 
instructions (Z7). However, in the process it is necessary to be able to 
stop — “to see forest behind trees” . 

The final event is the explosion of hydrogen Zig in the battery- 
storage tank; it occurs at achievement of explosive concentration Zis 
and simultaneous action of a source of ignition Ziq. The explosive con- 
centration of hydrogen is formed, if ventilation Zu and checking Z14 of 
concentration of hydrogen are absent. The checking is absent due to a 
mistake of staff or failure of gas analyzer Zu. Failure of a gas analyzer 
means failure of portable Z2 or stationary gas analyzers Z3. The absence 
of ventilation is by failure of manual Z7 and automatic Z15 start. The 
latter occurs because of failure of fan Zq or because of switching-off the 
system of automatics Z12. The switching-off of the system of automatics 
occurs because of simultaneous failure of automatics of after-burning Z4 
and gas analyzer Z5. The presence of a source of ignition is caused by 
possible smoking of staff Zio or presence any sparking Z13. The sparks 
occurs in the fan Zg or on the contacts of battery. 
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The scenario of explosion of hydrogen in the battery-storage tank of 
the submarine can be written down as follows (events and relations are 
shown in capital letters) : 

Rule 1. EXPLOSION of HYDROGEN occurs 
IF there is EXPLOSIVE CONCENTRATION 
AND there is a SOURCE of IGNITION; 

Rule 2. EXPLOSIVE CONCENTRATION occurs 
IF CHECKING of HYDROGEN 
AND VENTILATION fail; 

Rule 3. The CHECKING of HYDROGEN is absent 
IF the MISTAKE of PERSONNEL 
OR FAILURE OF THE GAS ANALYZER; 

BOTH STATIONARY AND PORTABLE take place; 

Rule 4. The SOURCE of IGNITION is present 
IF SMOKING the PERSONNEL 
OR SPARKLING IN THE FAN 
OR SPARKLING ON BATTERY BUSES take place; 

Rule 5. VENTILATION is absent 

IF THE FAN IS NOT STARTED UP MANUALLY 

AND THE FAN IS NOT STARTED UP AUTOMATICALLY; 

Rule 6. The FAN is not STARTED UP AUTOMATICALLY 

IF FAILURE of the FAN 

OR FAILURE OF SYSTEM OF AUTOMATICS: 

AND REBURNINGS OF HYDROGEN 
AND THE GAS ANALYZER take place. 

The above stated scenario fixes only the events leading to explo- 
sion, and does not fix event when explosion is impossible though some 
elements fail. 

The reasons of explosion at the lowermost level of the tree of events 
Zi~Zio are named initiating conditions (IC) and considered as inde- 
pendent random events. We note that the phenomenon is investigated 
“top-down” : first we formulate the dangerous condition (explosion), and 
then define its possible reasons. For each dangerous condition of sys- 
tem failures of its elements or chains of failures are analyzed until the 
primary failure (of a single unit or a mistake of the person) is found. 

Organizing role of mathematics can be seen when forming of L- 
function of a dangerous condition. If the creative part of research is 
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finished with the scenario of the dangerous condition (fig. 17.1), then 
L-function of dangerous condition can be written down as a logic matrix 
of events Z{: 





1 


Zi 


Z4Z5 


^7 


^8 




. , .^10) = * 


Z2Z3 


^6 




^9 

^10 



( 17 , 1 ) 



After removal of brackets (logic multiplication) we get the L-function 
of dangerous condition as the disjunction of twelve minimal path of 
dangerous condition (functioning): 



Y (Zi, . . . , Zio) 



ZjZeZjZs 
ZiZqZjZq 
ZiZqZjZjo 
Z 1 Z 4 Z 5 Z 7 Z 8 
Z 1 Z 4 Z 5 Z 7 Z 9 
Z 1 Z 4 Z 5 Z 7 Z 10 
Z2Z3Z6Z7Z8 
Z2Z3Z6Z7Z9 
Z2Z3Z6Z7Z10 
Z2Z3Z4Z5Z7Z8 
Z2Z3Z4Z5Z7Z9 
Z2 Z3 Z4 Z5 Z7 Zio 



(17.2) 



Thus, it is necessary to understand that in this case explosion of a mix- 
ture of air and hydrogen can develop only in 12 different ways, and not 
one more. 

Inverting (17.2), we obtain the function of dangerous condition as 
the disjunction of six minimal cross-sections of prevention of danger; 



y(Zi,...,Zio)- 



Z 1 Z 2 

^ 1^3 

Z 8 Z 9 Z 10 



(17.3) 



Uniqueness in the given context is understood as the possibility of pre- 
vention of explosion by six minimal sets Z^, only, and not one more. 
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Table 17.1. “Weights” of arguments Zi of function (17.1) 



Zi 


Zi 


^2 


^3 


^4 


^5 


^6 


^7 


^8 


^9 


Z\e 


Gzi 


0.205 


0.068 


0.068 


0.068 


0.068 


0.205 


0.342 


0.049 


0.049 


0.049 



From (17.2) and (17.3) it is visible that the event Zj (the fan is not 
started up manually) is included into all 12 minimal path of dangerous 
functioning, and at the same time, it is the most “profitable” in minimal 
sections of prevention of danger, i.e. development of explosive conditions 
is impossible without Zj, and for prevention of explosion it is enough to 
start of the fan Zj manually. In Table 17.1 weights of arguments Zi are 
given. 

Weighing of initiating events Zi one at a time, two at a time, etc., 
allows us to estimate their role in creation of the dangerous condition 
of system only by their place in (17.2) and (17.3), i.e. by taking into 
account only the logic of development of possible events. However, it 
is already quite precious. Specialists of the system are to come to the 
unambiguous and explained result. At the same time, it is necessary not 
to forget about enormous influence of probabilities of the events Pi. 

The efforts of specialists, directed to more objective estimation of 
initial probabilities of initiating conditions Zi, are rather useful and 
productive. In case of successful overcoming the specified information 
barrier, the further development of the analysis of safety of CS should 
be continued in the direction of specification of the real contribution of 
events to development of dangerous conditions (or their prevention). 

We set some simple initial data reflecting our idea of possible values 
of probabilities (Table 17.2). 

In this simple example, in which the function of dangerous condi- 
tion does not contain repeated arguments, we shall solve the problem 
omitting orthogonalization, that is, we shall search explosion risk from 
expression (17.1): 
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Table 17.2. Initial probabilities of danger of arguments Zi 





Zi 


^2 


^3 


^4 


^5 


^6 


^7 


^8 


^9 


^10 


Pi\ 


0.01 


0.001 


0.001 


0.001 


0.001 


0.001 


0.0001 


0.01 


0.01 


0.01 
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Table 17.3. Contributions of initiating events Zi to the danger of the system 





Zi 


^2 


^3 


^4 


^5 


^6 


^7 


00 


^9 




Bzi 


0.99 


0.0001 


0.0001: 


0.0009 


0.0009 


0.99 


1.0 


0.83 


0.83 


0.83 



On substituting initial data from Table 17.3 in (17.4), we get: Py — 
0.1180398 • 10“^. Individual contributions B^i as parts of the system 
risk Py are presented in Table 17.3. 

The considered risk LP-model of explosive and fire dangerous places 
(on ships, in apartments, at gas and oil transfer stations) is an example 
of not only constructions of the risk LP-model, but it is also a demonstra- 
tion of the risk LP-model for the risk estimation in insurance. Indeed, 
the risk of insurance of the system is equivalent to non-success risk of 
the system. 



17.2 Risk LP-model of the structural-complex 
system 

LP-models can be rather complex and have some hundreds elements and 
some cycles. Before we build a scenario and a risk LP-model, we need to 
become acquainted with some examples of risk LP-models in the field of 
engineering. Below we shall consider an example of the risk LP-model 
of the complex technical system and show the possibility of its training 
on statistical data by using the methods proposed above. 

Consider the risk LP-model of a ship power plant [2,7], which dia- 
gram is given in fig. 17.2. Here we have the following elements: 

xi, X 2 are main generators of alternating current; 

xs, X 4 are main switchboards of disconnected load; 

X 5 , xq are automatic switches; 

xj, xg are sections of fixed load; 

xg, x\g are automatic section; 

xii^ x \2 are reversible converters of direct-to-alternating current; 

Xi 3 , X \4 are silicic shutoff devices; 

Xi 5 is direct current source; 

2 ^ 16 ? ^17 are boards jumpers with automatic switches. 

The capacity of any of main generator is sufficient for supplying 
the electric energy consumers, connected by network with switchboards 
^35 ^ 7 ) ^ 8 - The capacity of reserve source X 15 is enough for supplying 

with electric energy all consumers with fixed load (from switchboards 
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Figure 17.2. The structural risk model of the complex object: electric power plant 



xj,xs), or only with load from one of switchboard xj 0 xg. Carrying 
capacity of the jumper 2:17 corresponds to the power of one main gen- 
erator; carrying capacity of the jumper x\q corresponds to the power 
of the reserve source. We could analyze 16 conditions of the electrical 
system. We write down the risk LP-model of the system as follows: 

Y = X2,x^ V X'jx^. (17.5) 

The LP-model was trained by the statistical information, which we used 
for training the credit risk LP-model. Each sign-element had some 
grades. The functioning LP-model of the power plant is taken from 
work [2j. In the matrix form this LP-model is written down as follows: 
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This logic risk function is orthogonalized by using a program working on 
the basis of algebra of corteges [88,89]. In orthogonal disjunctive normal 
form, the risk L-function contains 139 conjunctions, logically connected 
by the sign of disjunction. This orthogonalized LP-model can not be 
given here (it would take many pages), neither the corresponding risk 
P-model. However, the risk P-model was brought in the program for 
identification and was trained by method of the random search with 
taking into account the GIE. The results of investigation of this LP- 
model are given in details in [2,7]. 

17.3 Risk by prolongation of resource of power 
equipments 

Now in the world great attention is paid to the problems of prolonga- 
tion of resource of power equipment, rocket starting complexes, units 
of nuclear power stations, pulp-and-papermills, etc. These objects are 
complex systems (CS). 

The problem of estimation of engineering and financial risks at re- 
source prolongation and safety ensuring of power equipment is integrated 
and includes two primary goals: 

1. Monitoring of actual technical condition of power equipment and 
decision-making on prolongation of its resource and safety providing; 

2. The estimation and analysis of technical and financial risks of 
failure of power systems, having some sources and consumers of energy 
and including as elements their personnel, power stations, transformers, 
power lines, switches, etc. Such systems have some ways of allowable 
functioning, as well a number of conditions, leading to an accident. 

For estimation of risk of resource prolongation and maintenance of 
safe operation, it is necessary to execute the following complex of tasks 
for each concrete equipment of CS: 

• To carry out experimental and theoretical researches of actual condi- 
tion of equipment; 

• To establish standards of allowable defects for elements of equipment, 
by taking into account change of characteristics of materials, caused 
long operation and the temperature-power history of loading of the 
constructive element during long operation; 




344 E.D.Solojentsev 



• To establish requirements and specifications to parameters, to en- 
durance and reliability of replaceable details and units of equipment, 
as well as to the organization of their service and repair, to mate- 
rials of details and coating, greases, modes of operation, systems of 
monitoring of the condition of technological processes and equipment; 

• To construct the risk LP-models of failures and accidents of equipment 
as structurally complex systems; 

• To analyze the risk P-models of failures and accidents, to estimate the 
importance of their elements in risk and financial losses with taking 
into account their place in the structural scheme and probabilities of 
failures; 

• To determine optimal engineering and economic decisions for prolon- 
gation of resource and maintenance of safe operation of power equip- 
ment. 

For good safety of CS it is also necessary to have: 

• Information technologies, based on systems of monitoring, for man- 
agement of CS safety by risk value based on systems of monitoring; 

• Program complexes for construction and research of the risk LP- 
models of failures and accidents of CS and their identification on statis- 
tics of failures and parameters of states, and also computer simulators 
for training of personnel for risk management. 

17.4 Safety management of nuclear power plants 
by the method of dynamic barriers 

It is necessary to have an unambiguous and illustrative methodology of 
Nuclear Power Plant (NPP) safety control for practical use by profes- 
sionals. The work is aimed to develop of unified professional language for 
all the NPPs to identify power unit status, the NPP operation violations 
and corrective actions, as well as NPP emergency status control algo- 
rithms optimization (or symptom oriented emergency actions — SOEA). 
The result we should reach is the optimization of the areas of the NPP 
safety related activities [107]. 

According the suggested in [107] System of Dynamic Barriers (SDB) 
all the activities aimed at the NPP safe and reliable operation are in- 
tegrated in a single structure. It is supposed that at this NPP, in ac- 
cordance with the Quality Assurance Program, the required level of the 
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equipment, personnel and procedure quality has been reached, and the 
appropriate surveillance for revealing and eliminating latent weaknesses 
is established. In order to improve the standards, other NPP’s positive 
experience of operation is used. 

All initial events (failures) are revealed by the loss of “normal” func- 
tion by any quality component. This moment is considered to be the 
beginning of a transition progress, and the transition in its turn is con- 
sidered as a consequence of the seven main types of the power unit 
conditions (states): from “normal” to “severe accident” . 

The main reason to develop the SDB methodology was the necessity 
to obtain complex approach to safety regulation of NPP, which could 
become common for all types of NPP as well as for practical use by the 
specialists. 

That is why the proposed methodology uses generally accept of 
terms, principles and approaches that guarantee reliability and safety 
of NPP. Besides, unambiguous and simple gradation of types of power 
generating units (PU) states (conditions) is done. Methodology is com- 
plex, since all types of possible PU states, all kinds of safety activity 
and all components guaranteeing quality are considered in it. 

The purposes of the methodology development are as follows: 

• to create the language for specialists, common for all types of NPP, 
which would provide identification of PU states and disturbances 
in NPP work, troubleshooting activity; 

• to optimize system of dynamic barriers at NPP. 

The key terms of the methodology are “types of states” (or “states” ) 
and “dynamic barriers” (or “barriers”) The proposed term “dynamic 
barriers” should not to be mixed up with common used “physical” bar- 
riers — means of radio-activity protection. 

SDB is presented as the scheme in fig. 17.3. The concepts and their 
internal correlation are shown in a natural way in the scheme. Develop- 
ment of the accident is shown as PU’s sequential transitions from one 
state to another. As a base of state classification the designed transient 
of PU from small deviation to severe accident, is chosen. The states of 
PU are chosen from the point of view of safe control of NPP. 

It can be said that the dynamic model of progress of accident sketched 
in fig. 17.3 presents transitional regime of the PU as the consecutive 
change of unit’s states. It is worth reminding that “small” problems in 
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NPP exploitation are potential accidents. Taking into account probabil- 
ity of their further progress, the problems can reach the area of foreseen 
or not foreseen by the design project accident as a result of failure of 
quality guaranteeing components: equipment, staff (personnel), man- 
machine auxiliary interface devices and implements. 

According to the research, the probability of operator’s error during 
the first few minutes of an incident is equal to 1, but after 40 minutes 
it is equal to 10““^. Let us recall that common practice of so-called 
Symptom Oriented Emergency Action (SOEA) or operating procedures 
are applied only after the 5-th barrier is crossed. 

Thus, it is necessary to have a complex system of barriers that should 
block development of an accident from the very beginning and with the 
main goal to increase reliability of human factor. 

Naturally, there is a direct connection between the number of such 
incidents at NPP and the reliability of equipment, the qualification of 
personnel and the adequacy of man-machine interface implements. In 
other words, the number of such accidents at NPP is a measure of re- 
liability and safety level of NPP. The final goal of any significant for 
safety activity is to make a considerable contribution to strengthening 
the corresponding dynamic barriers. 

Therefore, SDB presents a high-level structure which unambiguously 
defined field of “place, time and space point” for every kind of reliability 
and safety related control and regulation at NPP. The main considera- 
tion is focused on: 

• functions of operators when there is a progress in the incident/accident 
is developing; 

• support of operators so as to organize a safe control of NPP; 

• analysis and identification of disturbances in NPP work, troubleshoot- 
ing activity. 

SDB description and examples of application. Ail kinds of 
activity guaranteeing safe and reliability operation of NPP are described 
in the common structure shown in fig. 17.3. It is supposed that the 
“Quality Assurance Program” is carried out at given NPP, so that the 
needed quality level of equipment, staff and auxiliary technique of man- 
machine interface is guaranteed. 

The proposed here terminology “Man-machine auxiliary communi- 
cation interface means and implements”, in our opinion, is more com- 
prehensive than the term “Procedures” , because the former includes all 
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the means necessary and sufficient for the operator to manage reliable 
and safe work of the power block. At the analysis of operator’s work 
the reliability and safety of operation of the power unit which depends 
on the information display system, support system, diagrams, instruc- 
tions, procedures, communications, hardware algorithms and language 
of communication. This term or a similar term “auxiliary technique 
of human-machine interface” better describes the essence of the prob- 
lem as a technique which allows the operator to carry out safe reliable 
control of PU. It is advisable to use shorter and more adequate term 
“implements” while analyzing the operator activity. 

Internal and external expert examination of activity as well as su- 
pervision of functioning should be done to reveal “latent” shortcoming 
of components that guarantee quality of equipment (a), personnel (b), 
and implements (c). 

As a result of internal and external expert examination of NPP’s 
activity certain corrections should be made and quality standards for 
equipment, staff and implements should be improved. In order to im- 
prove standards the “good experience” of other NPP’s can also be used. 

The start of the safety violating transitional process in terms of SDB 
is initialized by failure of quality component (when the 1-st barrier is 
crossed). The moment of its initialization is considered to be the be- 
ginning of the transitional process and the transitional process itself is 
considered to be a sequence of state (condition) changes of PU. 

The basis of classification of PU state types is the sequence of states 
during the process of safety violating transient from some failure of qual- 
ity component to severe accident. The numbers of states of PU are as 
follows: 

N1 means the absence of failures; 

N2 is failure (incident) with does not lead to power decrease; 

N3 is failure (incident) leading to power decrease; 

N4 is failure (incident) leading to engaging the safety protection system; 
N5 is failure with breaching of the safety criterion (accident); 

N6 is accident with partly damage of core; 

N7 is accident with serious damage of core and impact to environment. 

“Intermediate safe” states that correspond to states listed above are 
supplied with the index “S” (see fig. 17.3). According to this figure the 
initial incident events that are not foreseen by the design project, are 
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transferred right away to “Accident state” of type “5” , because defence 
safety systems were not designed for preventing them (by definition). 

The fig. 17.3 is divided into three vertical parts which include the 
following information about: 

• “negative safe” PU conditions {N2 -f N7)-, 

• “intermediate safe” types of conditions (states, to which PU could be 
transferred when corresponding negative ones appear) ; 

• achievable goals, N2 -y N7\ 

• ways of achieving goals (technical and organizational matters). 

As was said above, the key terms are: types of PU states (“states”) 
and dynamic barriers (“barriers”). The term “state” means minimum 
quantity of information concerning deviation of states from normal (or 
safe) operation with guarantees a definite identification of the current 
PU state as one of the seven state types. 

The term “barriers” means the conditional borders between the PU 
states which prevent the transitional process from its undesirable devel- 
opment by means of purposeful conversion of negative PU states into 
corresponding safe ones. 

To be precise, the term “barrier” represents the complex of techni- 
cal and organizational actions with optimum contribution to the barrier 
reliability by each of the three quality components, namely: “equip- 
ment” (E), “personnel” (P), and “auxiliary” technique of man-machine 
interface implements (7). 

Every barrier has the number (1-7) corresponding to the state which 
should be transferred to a safe one. If any negative process begins, the 
needed barrier is provided by automatic and j or manual actions. The 
crossing of any barrier represents an incident or significant accident at 
NPP which requires the correcting steps as well as disclosure of direct 
and root causes of the accident. 

If any barrier is crossed (corresponding failure of a quality compo- 
nent) the analysis of causes should be undertaken together with inves- 
tigation of not used (missed) abilities of quality components for the 
purpose of making the crossed barriers stronger. 

To guarantee the safe control of the NPP, operator must timely iden- 
tify the PU state and undertake adequate actions so as to transfer the 
state of the PU to a safe one (so-called “control by the state”). 
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Figure 17.3. System of dynamic barriers preventing propagation of emergency 

transients on NPPs 



Particular (but important) case of “control by the state” is the use 
of SOFA procedure or system to identify one of the cases “4.S” or 
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“5.S” after the approved engaging of protective safety systems (so-called 
“broom”). 

Thus, operator’s support system should be focused in the first place 
on the information support of operators so as to help them to identify 
all PU states, mainly in safety violating transitional regimes of the unit. 
In other words, the scheme shown in fig. 17.3 appears to be the high- 
level generated video graph of the operator support system. This video 
graph allows the administrative staff, operators and specialists of Crisis 
Centers to watch and control the process of negative transient in a form 
of “dynamics of safety important states” . 

The formal notation and classification of correcting actions and fail- 
ures of quality components are maintained by two indexes: one is the 
number of barrier which should be strengthened (or which was crossed) 
and the other is the number of component which makes the crossed 
barrier stronger (or which failure led to crossing the barrier). 

Example 1. The correcting action “5.P” means that the purpose of 
strengthening of the 5-th barrier by training the personnel to act when 
the 5-th state happens (accident state). 

Example 2. The installation at the Leningrad NPP Units (RMBK- 
1000 type) of the Emergency Reactor Sub cooling System (ERSS) is 
identified by two symbols “4.E”, because the 4-th barrier was made 
stronger in “equipment” component. 

Example 3. The crossed barrier, coded by “3.P”, means the crossing 
of the 3-d barrier due to the failure of “personnel” quality component. 
Formal identification of incidents at NPP consist of sequence of crossed 
barrier including failure components and the final state of PU. 

Example 4- The failure of level regulator in drum-separator at the 
RMBK-type reactor caused the deviation of level above the given “level 
of set-point” and led to engaging the preventive automatics control for 
power decrease from normal 100% to 60%. 

Analysis and identification-, the code of the regulator failure in our 
sense is “1,1” because the 1-st barrier was crossed in “I” component 
( “auxiliary technique of interface implements” ) , not in the “equipment” 
component as it would be under common IAEA identification. Accord- 
ing to the proposed SDB methodology all processes are classified from 
the the point of view of the safety control of NPP. The failure is the 
failure of “implements for operator in the technological process control” . 
Unsatisfactory attempts of the operators to compensate the incident dis- 
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turbance in the drum-separator level led to crossing of the 2-nd failure 
“2.P” . The 3-d barrier fulfilled it is safety function duty and transferred 
the state No. 3 to the state “3.S” by decreasing the power level to 60%. 
Hence, the incident code description is represented as follows; 100% 1. 1- 
2. P -60% 3. S, where 100% is the initial power level before the incident, 
“3.S” is PU state after the incident, 60% is the final power level. 

Now complex databases of NPP (RMBK-type) incidents and barrier 
crosses are created at the Leningrad NPP on the described above ba- 
sis in order to undertake comparative analysis of dynamic barriers and 
correcting actions. It could be done for NPPs of different kinds. 

The top priority steps at NPP are those that exclude (or lessen the 
probability of) the failures that lead to the crossing of several barriers at 
the same time when it is not possible to strengthen the crossed barrier 
with the help of other quality components. 

The SDB as a complex system has to guarantee reliable and safe 
control of PU. Hence, SDB and NPP should be designed simultaneously. 
SDB should have reasonable barriers and optimum contribution of each 
quality component to each barrier. Databases of incidents at NPP of 
all kinds are used for these purposes. Thus, the optimum structure of 
dynamic barriers and high reliability of stuff activity can be guaranteed 
at the designing process. 

SDB is supposed to be developed continuously because each kind of 
activity represents the root of more detailed steps in a personnel activity. 

Conclusion. The SDB methodology, proposed and approved at the 
Leningrad NPP for organization and regulation of important for NPP 
safety activity can be used: 

• for improvement of algorithms realizing preventive control and emer- 
gency regulation of the main technological process; 

• as a common algorithmic language which can help specialists to elabo- 
rate certain kinds of activity to improve safety and reliability of NPP; 

• for analysis and formal estimation of incidents at NPP and for com- 
pilation of databases consisting of crossed barriers events and quality 
components failures; 

• for organizing of universal operator support systems; 

• for comparative analysis of certain SDB at reactors of different kinds; 

• for working and simulator training scenarios with various combinations 
of incidents and failures of different quality components; 
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• for acquainting the personnel of NPP with the concept of “control by 
the state”, as well as for teaching the personnel to understand the 
problem of safe and reliable operation of NPP. 




Chapter 18 



RISK LP-THEORY IN PROBLEMS OF 
EFFECTIVENESS 



The maintenance of effectiveness, quality and accuracy is one of the main 
and complex problem of economics and modern production [7]. At the 
same time this problem is not completely understood in the scientific 
plane and is not solved satisfactorily in the applied sense. First, we 
shall consider classical modern approach to estimation of quality, and 
then we shall turn to the logic and probabilistic theory of effectiveness, 
quality and accuracy. 



18.1 General problem of quality management 
in business 

For achievement of the effective production along with the quality of 
production itself, it is also necessary to consider the whole system of 
economic relations, to develop and investigate the management processes 
of all the activity of the enterprize and to pay attention to many aspects 
of the activity, such as finances, resources, personnel, etc. [7,108]. Now in 
use are American, European, Japanese, Russian and other standards for 
estimation and management of quality. In their essence these standards 
are identical and differ only in terminology and numerical estimations 
of importance of separate criteria. 

Management systems by quality are used for: 

1. Self-estimation of activity by companies in the framework of stan- 
dards of National Awards in the field of Quality; 

2. Management of developing of advantage in business. 
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The model criteria are divided into two categories; opportunities 
and results (fig. 18.1). Half of the criteria of the quality system defines 
Capabilities of the company, other half of the criteria defines Results of 
its activity. We denote these criteria by identifiers with indexes. The 
category of the Capabilities (Xio) is determined by estimates of the 
following criteria: role of leaders in the work organization (Xi), using 
of people potential (A' 2 ), planning in the area of quality (-^ 3 ), using 
resources (X 4 ), technological processes of manufacturing, advertising, 
service (X 5 ). The category Results (-^ 11 ) is determined by estimates of 
criteria of satisfaction of different people: Employee (-Te)? Customers 
(X 7 ), Society as the whole (Xg) and the financiers (Business results) 
(Xg). Elements of the system are interconnected. There is the strong 
connection between “Business results” (Xg), “Quality” (T) and “Satis- 
faction of the customers” (Xj). 

Indexes for the numerical estimation of the criteria, included in qual- 
ity, are introduced. For example, the Association of Customers and 
Satisfaction Index (ACSI) takes into account the product image, expec- 
tations of customers, the perceived quality as product characteristics, 
the perceived quality as service characteristics, the product perceived 
value and further adherence to the repeated purchase [108]. There are 
statistical proofs of dependence ACSI and economic parameters. For ex- 
ample, this is reaction of the stock exchange and the income by shares 
after publication of ACSI for various types of productions and branches. 

In many countries quality estimation systems are known as National 
premiums and are used with the purpose of stimulation of improvement 
of quality and competitiveness of production (services) and encourage- 
ment of organizations, which use advanced and effective methods of 
quality management. For example in Russia, Premiums by the Govern- 
ment of Russian Federation in the field of the Quality were founded in 
1996. 

We note some characteristics of the Premiums system. Centers of 
quality control carry out consultation and estimation of the documen- 
tation applied for competition on the Premium. The information, sub- 
mitted by the companies, is strictly confidential and is not subject to 
disclosure. The estimation of quality of management systems of the 
companies is done by a group of the independent highly professional 
specialists who are specially prepared for this work. Usually not more 
than 12 premiums a year are given. Periodicity of self-estimation of 
quality of management systems is equal to one year. 
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Figure 18.1. Model of premium in the area of quality 



The maximal numerical estimations of criteria in points for the Rus- 
sian Federation Government Award model in the quality field are shown 
in fig. 18.1. The sum of all maximal estimations is equal to 1000. The 
given distribution of estimates is recommended to be used for any en- 
terprize and organization irrespectively of the kind of production and 
activity, of the sizes and forms of ownership. 

The self-estimation of the company quality system is carried out by 
“a special group” of the company. They give the estimation for each 
criterion X\-Xg in points and calculates the ratio of this estimation to 
the greatest possible value. The system of participation in competitions 
makes it possible to estimate the achieved level of criteria in per cent 
of the greatest possible value. Thus, the flaw of the company in each 
criterion and the activity direction is objectively visible. Achievements 
of the company can be determined by comparison of numerical values 
of criteria X\-Xg on years. 

Risk of loss of quality and market. Let us construct structural, logic 
and probabilistic models of risk of loss of quality and market. We de- 
note random events, corresponding to the quality criteria (fig. 18.3), 
by logic variables X\-Xg, property “Quality” by logic variable Y and 
derivative events of “Capabilities” and “Results” by Xio and Xu. We 
shall construct the structural model of quality loss risk (fig. 18.1) or the 
non-success model with logic connections OR. 
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Figure 18.2. Structural models of non-success risk: a) — in quality of company; 

b) — in business results 



“Quality” is the parameter which is difficult to measure. Introduc- 
tion of the maximal points to criteria and estimations of criteria for the 
specific company does not give a rigorous solution of all problems of 
risk. It may happen that more convenient to use as the final event is 
the easily measured criterion “Business results” (fig. 18.1). Earlier we 
already marked that the criteria “Quality” and “Business results” are 
closely connected. 

We write down out the risk L-function in DNF for the graph in 
fig. 18.2, a: 

y - Xi V ^2 V Xs V X4 V Xg V Xe V Xt V Xs V X9. ( 18 . 1 ) 

The corresponding risk L-function in ODNF can be written as follows: 
r = Xi V X2X1 V X3X2X1 V . . . ( 18 . 2 ) 
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The corresponding risk P-function can be written down 

F{Y ^ 1} = + P,Q,Q, + . . . (18.3) 

For training the risk LP-model of quality loss on the statistical data it 
is necessary to introduce grades for the criteria Xi~Xq which is quite 
obvious and not considered here. 

As a result of self-training, probabilities of non-success of events X\- 
ATg are known. Then it is possible to calculate risks of all N companies, 
pretending to Awards, and to plot their risks on the risk axis. Let us 
choose (fig. 11.2) the admitted risk Pad in such way that objects from 
the general sampling N are bad and the number of good objects Ng from 
the general sampling N is equal to the number of awarded premiums. 
For each company i one can calculate the relative number of companies 
fli, having smaller risk: 



ai = Ni/N. (18.4) 

One can also calculate risks P25, F50, • • - , which mean 25%, 50%, ... of 
risk of the best companies. 

Example 1. Let us consider difference of estimations of quality 
of objects by traditional arithmetic and logic addition of estimations 
for the criteria Xi,X 2 , . . . ,Xq (fig. 18.2). According to statement of a 
general problem of quality, we suppose that the points Xi, Xg, . . . , Xg 
are given in relative values. Now we consider them as probabilities. Let 
five objects be considered. They are sorted in the degree of deviation 
of probabilities from the average value, which for all these objects are 
equal to Pm — 0.5. 

The objects 4 and 5 differ from the objects 2 and 3: in them the 
place of the points by the criteria Xe and X7 are transposed (X7 has 
the maximum number of the points). Logic estimations of objects 4 
and 5 do not change, but arithmetic estimations do. The arithmetic 
estimations of quality of objects as the average of distribution of points 
are calculated. The logic estimations of quality of objects as probabilities 
of success are computed. 

From the results given in Table 18.2, it is easy to see that the arith- 
metic and logic addition of initiating events lead to different ranking 
of objects. From the common sense the stability of quality estimation 
demands that the first place should be given to object 1 as does logic 
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Table 18.1. Comparison of the quality of objects 
with arithmetic and logic addition of estimations 



Ob- 

jects 


Xi 


^2 


xz 


3^4 




Xq 


X7 


3^8 


Xg 


Arith- 

metical 


RA 


Logi- 

cal 


RL 


1 


0.5 


0.5 


0.5 


0.5 


0.5 


0.5 


0.5 


0.5 


0.5 


500 


3 


0.00195 


1 


2 


0.4 


0.6 


0.4 


0.6 


0.4 


0.6 


0.4 


0.5 


0.6 


494 


4 


0.00166 


2 


3 


0.3 


0.7 


0.3 


0.7 


0.3 


0.7 


0.3 


0.5 


0.7 


484 


5 


0.00099 


3 


4 


0.4 


0.6 


0.4 


0.6 


0.4 


0.4 


0.6 


0.5 


0.6 


510 


2 


0.00166 


2 


5 


0.3 


0.7 


fi.3 


0.7 


0.3 


0.3 


0.7 


0.5 


0.7 


520 


1 


0.00097 
1 





addition of events. It should be noted that the estimation is similar to 
that by the methods of maximum likelihood and information entropy. 

18.2 Particular problems of quality loss risk 

Particular problems of risk concern basically to processes of designing, 
manufacturing and tests of products (criterion X^). 

Quality loss risk for a car. For the problem we introduce signs and 
grades for description of risk object. The description is simplified, in re- 
ality for a car, and the other “market” products (refrigerators, comput- 
ers, apartments, etc.), these descriptions should correspond to accepted 
“standards” in industry branches. 

We define the final event as the deviation from the expected profit. 
From statistical data the average profit in the industry branch is known. 
The admitted minimal profit is established by the company and known 
too. The table “Objects and signs” for training the risk P-model is filled 
in, for example, weekly, according to data of sales and to statistical data 
from corresponding institutes. 

The company describes the object, for example, by the following 
groups of signs: 

1) Technical and ecological signs (design, speed, acceleration, econ- 
omy, resource, safety, reliability, weight, comfortableness, noisiness, tox- 
icity, ease of control, etc.); 

2) Signs of market and service (the amount of shops for sales and 
services; a level of pre-selling preparation and service, etc.); 

3) Economic signs (price, expenses for advertising, participation in 
exhibitions, investments into manufacture, developmental works, tech- 
nological processes and equipment, researches, etc.); 

4) Seasonal factors; 
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5) Condition of market (stagnation, recession, rise). 

Now we show how to introduce grades for the named signs describing 
the risk object. Let, for example, the sign of economy be presented as 
follows; 



~ (18.5) 

where Vj is the fuel rate for 100 kilometers; Vjm is the average fuel rate 
for cars of the given class (or the fuel rate for the product of the main 
competitor). Then grades of signs Zj can be assigned as follows: (0.95 < 
Zj < 0.97) is grade 1; (0.97 < Zj < 0.99) is grade 2; (0.99 < Zj < 1.01) 
is grade 3; (1.01 < Zj < 1.03) is grade 4; (1.03 < Zj < 1.05) is grade 5. 

The statistical data are necessary for training of the risk model. It is 
possible to use the risk L-model of the quality loss of the type of (11.9) 
and the risk P-model of the quality loss of the type of (11.10). 

Risk by breakdown of components. The risk LP-model with compo- 
nent parts can have the following interpretation. Any component (sign) 
during time T can fail. Failure can happen to one, two, three ... or all 
components. The events leading to failure of components are considered 
to be independent. 

The meaning of grades for the risk model of the quality loss, for 
example, could be installation time of a component from the moment 
of its manufacturing. For any component j = 1,2, ... ,n the number 
account of grades in the time can be different. For example, the first 
component has grades: 1 for 3 months; 2 for 6 months, etc. There are 
only 5 signs in our model in fig. 11. 2. 

Risk because of inaccuracy in manufacturing of a compressor. In 
the sectional case of a centrifugal compressor (fig. 18.6) there are n 
channels-grooves for n wheels. Inaccuracy in manufacturing for width 
of channels (sizes Ai, A 2 , . . .) and width of wheels (sizes Si, B 2 , . . .) can 
lead to the quality loss of any one, two or all stages of the compressor. 
The compressor stage j can loose quality because of; 

1) Reduction of economy of the stage due to to increase of the flow- 
over of gas, if at least one of backlashes has value higher than allowable 
one; 

2) Opportunity of tease, if at least of backlashes is less than allowable 
value. 

Thus, for any stage j of the compressor {j — 1, 2, . . . , n) three con- 
ditions (events) are possible; Zji is the quality loss because of a big 
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Ai 




A2 



B2 




Figure 18.3. The scheme for calculation of risk of quality loss and accuracy for the 
two-stage centrifugal compressor 



backlash, Zj 2 is the quality loss due to a small backlash, Zj^ is by the 
normal allowable backlashes. The quality loss by object can occur at 
one, two, three,. . . or all stages (signs) of the compressor. The events, 
which mean the quality loss by stages, are considered to be independent. 

The risk structural model of the quality loss of the “node” type, 
shown in fig, 11.1, a, has the risk LP-model (11.9). Each of events 
Zj,j = 1,2, ...,n, consist of GIE Zji, Zj 2 , Zj:^. In the risk structural 
model it is possible to consider separately each of bilateral backlashes in 
the pair channel-wheel and sizes of other details, influencing conditions 

Risk because of inaccuracy in manufacturing details. We consider one 
more example of risk inaccuracy in manufacturing details. Details under 
consideration are big parallelepiped of various sizes. The risk of the 
product depends on the total size B for n details located in a line closely 
to each other (fig. 18.4, a). The size tolerance dB\ — B\max ~ ^imin 
for the first detail is broken into iVi grades, the size tolerance for the 
second detail dB 2 is broken into N 2 grades, etc. If the number of grades 
for the size of some detail is equal to, for example, from 2 to 11 and 
the number of details is equal to n == 20, then the number of different 
possible assemblies is enormous one about 

The sizes 5i, B 2 , . . . , are measured with the help of length gages, 
which numbers correspond to grades of the sizes. Each of sizes Bi, 
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a 



b 







B 



Figure 18.4. The scheme for calculation of loss risk of accuracy by items with linear 
(a), flat (b) and spatial dimensional circuits 

i? 2 , . . . , Bn can not be measured with the help of the standard pair of 
trammels. The total size B = B\ ^ B 2 P Bn can be measured after 
assembly, for example, by distance of the last detail from some known 
(control) plane. Three grades can be assigned to the total size: 1 means 
the size less than norm, 2 means the normal size, 3 means that the size 
is more than the norm. 

The risk logic function for the size B can be written down by ex- 
pression (11.9). The corresponding risk P-model can be trained on the 
statistical data of many assemblies. Then, by values of grades of details 
B\^ B 2 ,. . . , Bn it is possible to predict the non-success risk of any new 
product. If it is possible to measure some other intermediate sizes, for 
example, from four consecutive details, and to introduce grades for these 
measurements, then it is possible to make some risk logic functions and 
their combinations. If a detail is built not in a line, but on a plane 
(“labyrinth”) (fig. 18.4, b), it is also possible to write down some risk 
logic functions and their combinations. For a spatial arrangement of 
“cubes” it is possible to write down the risk LP-models too. 

Risk f 07' a product of “bridge” type. As an example, let us consider 
quality for object of a type of “bridge” (fig. 11,1, b). This is a complex 
object; the risk L-model has connections AND., OR, and repeated ele- 
ments, Risk objects have signs 1, 2, 3, 4, 5 which correspond to the logic 
variables Z\, Z 2 , Zs, Z 4 , Z^. The success risk L-model of the “bridge” is 
made on the basis of all shortest paths of successful functioning (11.11), 
After orthogonalization of (11.11) we obtain the risk P-model for the 
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Table 18.2. Conditions and parameters 



Conditions, 

i 


Parameter, 

Zi 




Parameter, 




Parameter. 

Zn 


Effectiveness, 

y 


1 


































Z{j 






















N 















“bridge” (11.12). 

The events Zi, .^ 2 , -^ 3 , <^ 4 , correspond to units of a product of 
“bridge” type. The units are made by brigades ^ 2 , ^ 4 , ^5 re- 

spectively with the number of workers (having personal marks), equal 
to the number of grades in a sign. The assembled products are tested; 
results of the test can be successful or non-successful. The protocol of 
testing form is a table “Objects and signs” . It is natural that instead of 
workers we can consider various process equipment, technological pro- 
cesses, firms delivering component units. 

For training the risk P-model of “bridge” type (fig. 11.1), the table 
with 1000 objects (700 good and 300 bad ones) is used. Signs have from 
4 to 11 grades — 40 grades in aggregate. Results of training of this 
model are in detail stated in Chapter 15 for the problem of bribes. 



18.3 Risk LP-modelling and analysis 
in problems of effectiveness 

The statistical data are given in the form of the table “Conditions and 
parameters” (table 18.2), containing in rows conditions of influencing 
parameters Zi, . . . , Zj, . . . , Zr^, and the effectiveness parameter Y . The 
parameters have differ nature and dimension. The number of conditions 
(or objects) in the table is equal to N . 

The main principles of the LP-theory of effectiveness coincide with 
the main principles of the risk LP-theory with GIE, stated in Chapter 
10. Here we use another statement of optimization problems. We shall 
consider two different statements of problems of effectiveness: 

1) Classification of object conditions into several classes; 

2) Determination of weights of parameters, influencing the effectiveness 
parameter. 
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Table 18.3. Conditions and parameter grades 



Conditions 

i 


Parameter 

grades 

Zi 




Parameter 

grades 




Parameter 

grades 


Parameter 
grades of 
effectiveness Y 


1 






















. . . 


. . . 










Zjr 
















• • • 






N 















18.3.1 General principles 

In mechanics for solution of problems of analysis of motion and stability 
we pass from the timing continuous representation of functions to the 
discrete frequency one. In the risk LP-theory for solution of problems 
of effectiveness we also pass from the continuous distribution of random 
parameters to the discrete frequency distribution. 

Quantization. The parameters Zi, . . . , Zj, . . . , influencing the 
effectiveness parameter, are the system of random variables, which de- 
fines the effectiveness parameter Y . The effectiveness parameter T, 
being a function of random values, has many-dimensional distribution. 

In order to pass to discrete distributions, let us break ranges of 
parameter change Zi , . . . , Zj , . . . , Z^ into intervals A^i , . . . , A/^- and Ny 
of identical (or different) width. The number of intervals for differ- 
ent parameters are different. The numbered values of intervals for 
each parameter are considered as grades of the influencing parameter 
r — 1, 2, . . . , and the effectiveness parameter r = 1,2, ... ,Ny. 

Any interval r of the parameter j we denote by logical variable 
(the random event) Z^>. That is, the actual values of the parameters 
Zi , . . . , Zj , . . . , Z„ on intervals we replace by the numbers of intervals 
Zjj. themselves. We shall consider the numbers of intervals as random 
events, which correspond to random grade-events forming GIE. . Thus, 
we obtain the table “Conditions and parameter grades” (table 18.3). 

Logic. The maximal number of combinations (different conditions 
of the effectiveness parameter) is determined by (10.1). The logical 
function for possible conditions of the effectiveness parameter is given 
by (10.5) in perfect disjunctive normal form (PDNF). Each condition of 
the effectiveness parameter from the possible conditions N is defined by 
the logical function (10.6). 
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18.3.2 Classification of object conditions 
to several classes 



By analogy with the problem of classification to two classes, by using 
the formulas (12.1) (12.2), the problem is stated as follows. It is re- 
quired to determine probabilities of grade-events Pjr, j = 1,2, 
r = and admitted risks Piad, P2ad^ • • • , ^kad (fig- 18-5) di- 

viding objects or states of parameter of efficiency into classes 1, 2, . . . , /c 
with the target function: 

F = Nic + N 2 c + . • . + Nkc max, (18.6) 

where A^i, A^2o • ■ • are numbers of correctly recognized objects in 
classes 1, 2, . . . , A:. 

The objects classification errors are as follows: 



E, = [Ni - iVie)/iVi; E2 = (N2 - N2c)/N2-, . . . ; = (iV - F)/AV; 

(18.7) 

where Ei, E 2 , . . . , Ek are errors in classification of objects or states to 
classes 1, 2, . . . , A:; Em is the mean error in classification of objects or 
states; Ni, N 2 , . . . ,Nk are numbers of objects or states in classes 1, 2 , . . . , A: 
in the table “Objects and parameters” or “Influential parameters and 
effectiveness parameter” (table 18.4). 



a) 
0 

b) 
0 



"good objects" 



P . P 

mm a 



"bad object" 



p p p 

h ad max 



Class 1 Class 2 Class 3 Class 4 



P P P P 

min ad] ad2 add 



1 



P 1 

max 



Figure 18.5. Classification of objects to classes 1,2, 
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Table 18.4- Conditions and grade probabilities 



Conditions 

i 


Probabilities 
of parameter 
grades 




Probabilities 
of parameter 
grades 

z, 




Probabilities 
of parameter 
grades 

Zfi 


Probabilities 
of grades of 
effectiveness 
parameter Y 


1 


































p. 

jr jr 








. . . 














N 








1 





The contributions of grade-events into risk: 

Eljr — {f^ljr ~ fflcjr) I ffljr'i ^2jr — {f^2jr f^2cjr) /f^2jri • • • i 

Ek = {ffk ~ ffkc)/ffk] ^mjr — {^jr ~ kf jrc) j jvi ( 18 . 8 ) 

where A^ 2 jV 5 • • • 5 ^kjr are numbers of objects or states with grades 
Zjr in classes 1, 2, . . . , A:; A^i^vct f^ 2 jrc^ • • • ? f^kjrc are numbers of objects or 
states with the grade Zjr in classes 1, 2, . . . , A: with correct classification 
of objects. 



18.3.3 Finding weights of parameters influential the pa- 
rameter of effectiveness 

We formulate the management problem of effectiveness as the problem 
of estimation of weights of parameters, influencing the effectiveness pa- 
rameter. In the traditional problem of the effectiveness, for example in 
the theory of accuracy, laws of distribution of parameters, influencing 
the accuracy, and the accuracy parameter itself, are assumed to be nor- 
mal, generalized normal or analytical [109]. These assumptions result in 
errors in accuracy analysis and in non-effective management of accuracy. 

Probabilities. As was said above, the actual values of parameters 
Zi, . . . , Zj, . . . , Zn in intervals are replaced by numbers of the intervals 
Zjr. Numbers of intervals Zjr are considered as random grade-events, 
which form GIE for any parameter. 

From the table “Conditions and parameter grades” (table. 18.3) we 
construct the new table “Conditions and grade probabilities” (table 
18.4). 

Probabilities (frequencies) of the grade-events r for the influencing 
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parameter-events j are equal (see also (10.2)): 

P^f = Njr/N, i = l,2,,,,,n; r = 1, 2, , . . . iV,, (18.9) 

where Njj. is the condition number in the table for the parameter j with 
the grade r. 

Let us also construct the discrete distribution for the effectiveness 
parameter Y by the statistical tabular data: 

Plf = Nyr/N, r=l,2,...,Ny, (18.10) 

where Nyr is the number of conditions of the effectiveness parameter 
with the grade r. 

We calculate the model (effective) values of probabilities of condi- 
tions i for the effectiveness parameter (lines in the table) from the ex- 
pression: 

Pij, + ... + Xj-aj- Pjj^ ...Xn-an- AP^j^. (18.11) 

Here: 

J\, J2^ . . . 1 Jn are the indexes belonging to the corresponding value 
areas: Ji G {l,A^i}; J 2 E {1,A^2}; •••; Jn ^ That is, for each 

parameter we substitute into (18.11) probabilities of its grade in the 
condition i. 

x\^ . . . ^Xj^ . . . ^Xn are related weights of influencing parameters Z\, 
Z 2 ,. . . , which are needed to be determined; 

Gi, . . . , aj, . . . , are the correction coefficients of probabilities of 
the parameters Zi, Z 2 , . . . , which we determine by the condition of 
equality of their mean values in the GIE to the mean value of the prob- 
ability of the effectiveness parameter in its GIE: 

ai = Pym / Plm'i ♦ • • CLj ~ Pym/ Pjm\ • • • an--PymlPnm. (18.12) 

where Pym, Pim, ■ • • , Pjm^ • • • J Pnm are mean values of probabilities of 
grades in GIE, which are equal to: 

Pym — l/-^j/) P\m — l/-^l5 • • • > P jm — 1/-^J? • • • j Pnm ~ l/-^n* 

(18.13) 
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Table 18.5. Model and tabular values of probabilities of conditions of the 
effectiveness parameter 



Conditions 

i 


Tabular probabilities 
of the effectiveness 
parameter 


Model probabilities 
of the effectiveness 
parameter 


Values of 
the effectiveness 
parameter 


1 


























... 






N 


i 







Thus, the correction coefficients ai, . . . ,aj, . . . ,an are equal to: 

CLl — NljNyj • • • 5 ~ ‘ ~ (18.14) 

The mean value of the effectiveness parameter Tj can be calculated by 
the following formulae: 



N 



= /N, 


(18.15) 


t 1 

N 

Ym2 = Y^i*Pi- 


(18.16) 



Let us make the table “Model and tabular value of probabilities 
of conditions of the effectiveness parameter” (table 18.5), in which the 
model values of are determined by (18.11), and the tabular values 
of probabilities are taken to be equal to the probability values of 
corresponding grade-events of the effectiveness parameter in the interval, 
to which Yi belongs. 

Closeness of distributions of probabilities P^^^ and P^°^ depend 
on weights aii, . . . , . . . , of parameters Zi, . . . , Zj, . . . , influenc- 
ing the effectiveness parameter. We determine optimal estimations of 
weights Xj, j ^ 1, 2, ... ,n we determine by algorithmic solution of the 
optimization problem with the criterion function by the least-squares 
method: 



F - 



N 



^ ^ptah pmod'^2 



i=l 



min . 



(18.17) 
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For finding x\^ . . . ,Xj, . . . ,Xn we use the random search method and the 
small increments method, which we used before. The weights Xj,j = 
1, 2 , . . . , rr are needed for distribution of resources to management of the 
effectiveness parameter Y. 

Values of the effectiveness parameter V and their probabilities 
are presented in table 18.5. Let us sort this table by the value of the 
effectiveness parameter Yi and make normalization of values (the 

sum of probabilities of the array from N values should be equal to 1). 
Then, at the given admitted value of the effectiveness parameter Yad, 
we can calculate the probability (or Risk) of the condition: 

V < Tad. (18.18) 

For this purpose, we sum up probabilities of those conditions of the 
effectiveness parameter, for which the condition (18.18) holds. 

Estimation of risk Risk of the current condition of the effectiveness 
parameter is carried out by constructing and sorting table 18.5 using 
the described above method (see chapters 10 and 15). 

The forecasting of the effectiveness parameter is done as follows. 
For the prediction values of the parameters Zi, . . . , Zj, . . . , influenc- 
ing the effectiveness parameter, the probability PJ^°^ is calculated from 
(18.11) and the effectiveness parameter Y is calculated by constructing 
and sorting table 18.5. 

Example. 

Numerical investigation for estimation of weights of parameters in- 
fluencing the effectiveness parameter Y, are fulfilled with the earlier used 
data of V = 1 000 credits. Only first five signs of the credits, having 
from 4 to 11 grades taken into account. As the effectiveness parameter 
we take the computed values of risks of credits, obtained on the trained 
LP-model of the credit risk with all 20 signs (see Chapters 11 and 15). 

In researches the effectiveness parameter Y is represented by 20, 10 
and 5 discrete values of grades, for which probabilities are computed by 
formula (18.9). 

The optimization problem (18.17) could be solved by the analytical 
method of the least squares with use of the matrix of probabilities Pz[l : 
1000, 1 : 5] of influencing parameters Zi, Z2 , . . . , Z5 and the vector of 
probabilities Py[l : 1000] of the effectiveness parameters Y. Let us write 
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Table 1 8. 6. Weights of parameters influencing the effectiveness 



Variants 


Number of 
grades Ny 


Value of 
function F 


X\ 


X2 


2^3 


a?4 


xb 


1 


20 


1.051 


0.436 


0.093 


0.176 


0.130 


0.162 


2 


10 


3.845 


0.451 


0.101' 


0.182 


0.141 


0.121 


3 


5 


14.792 


0.503 


0.087 


0.153 


0.111 


0.143 



down the initial system of equations: 

Pz-x^Py. (18.19) 

We denote Qz = Pj ■ Pz- Then we have 

Q,-x = PpPy = By^ (18.20) 

and the following solution: 

x = Q-'^-By,. (18.21) 

However, in researches the optimization problem (18.17) is solved algo- 
rithmically with use of the above described method of random search. 
It allows us to establish stability of the solution x with respect to the 
number of influencing parameters. 

By results of calculation (table 18.6) we can make the following con- 
clusions: 

1. The weights of influencing parameters differ more than in five 
times; 

2. The weights of influencing parameters change with change of num- 
ber of grades in the effectiveness parameter Y ; 

3. The number of the analyzed parameters, influencing the effective- 
ness parameter, should not exceed 4-7 because of decreasing stability of 
the solution (lowering conditionality of the matrix Qz- 





CONCLUSION 



In conclusion we consider some basic characteristics of the scenario logic 
and probabilistic management (LP-management) of the non-success risk, 
namely [113,114]: 

• Characteristics of risk objects and criterions of risk LP-models; 

• Features of the scenario LP-management of the non-success risk; 

• Similarity of the risk LP-theory with groups of incompatible events 
with other methods of classification of objects and risk management; 

• Applications of the scenario LP-management of the non-success risk. 

Characteristics of risk objects and criterions of risk LP- 
models. In this book we stated the logic and probabilistic risk theory 
and its application. The risk LP-theory consists of following sections: 
LP-calculus, LP-methods, and LP-theory with GIF. 

Applications of the LP risk theory with GIF are considered for the 
following problems: credit risk, security portfolio risk, risk in efficiency 
problems, and risk in multi-state system reliability. 

In all the cases we use the algorithmic quantitative computations 
for determining: element risk characteristics, object risk characteristics, 
system risk characteristics, risk model characteristics, and risk model 
optimization criteria. 

Characteristics of the element risk are: failure probability, its contri- 
bution, weight, and importance in the object risk; the number of grades. 

Characteristics of the object risk are: risk, damage, price for risk, 
and relative parts of danger objects in system. 

Characteristics of the system risk are: the admitted risk, the admit- 
ted damage, the mean risk, the mean damage, and the possible number 
of different conditions of the system. 
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Different risk problems have different risk LP-models and criteria. 

Criteria of credit risk LP-models are as follows: accuracy, robustness, 
errors of classification, and probabilities of grade-events. 

Criteria of the security portfolio risk LP-model are as follows: the 
maximal admitted risk, the minimal admitted yield, the number of port- 
folio conditions in the “tail” , and relative parts of securities in the port- 
folio. 

Criteria of the risk LP-models in efficiency problems are as follows: 
the maximal admitted risk, the minimal admitted efficiency, and relative 
weights of the parameters influencing the efficiency parameter. 

Criterions of the risk LP-models in reliability problems are as follows: 
the risk as probability, weight, group weights, and importance. 

For ease of practical applications of the risk LP-theory we gave many 
examples of scenario risk management including examples in design, 
debugging test, operating test, operating with the use of monitoring. 

We also described Software for risk problems based on LP-methods, 
LP-theory with GIE, cortege algebra. 

Features of scenario LP -management of the non-success 
risk. These features relate to (see Table): types of used risk mod- 
els, problems in question, tasks, mathematical methods in technology 
of risk management, definition of risk, estimation of quality of the risk 
model, a type of distribution of random values, connectedness of vari- 
ables, a type of calculations, construction of the risk model, solution of 
optimization non-linear problems, risk analysis, risk management, areas 
of applications. It is because of these features, the risk LP-models show 
almost two times higher accuracy and seven times higher robustness 
in classification of credits, than other well-known models of risks and 
classification. 

The scenario LP-management of non-success risk uses the risk LP- 
models with connections OR, AND, NOT, cycles and groups of incom- 
patible events. The risk is considered as the probability of non-success 
with the expected damage. The quality of the risk model is estimated 
by errors in classification and robustness of classification. In the sce- 
nario LP-management of the non-success risk, a lot of different and new 
problems of estimation, analysis and management of risk are solved. 
Amidst them we can mention: the risk quantitative estimation, the ob- 
ject classification by risk, the object risk analysis, the price for risk, 
the risk analysis of the object set, the analysis of the risk model; risk 
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Table. Features of the risk LP-theory with GIE 



Features 


Contents 


Type of 
used 

risk models 


Risk logic-and-probabilistic models with 
connections OR, AND, NOT, cycles, 
and groups of incompatible events (CIE) 


Solved 

problems 


Quantitative risk evaluation, object classification 
by risk, risk analysis of the object, 
price for risk, risk analysis of a object set, 
analysis of the risk model; management of, 
risk, selection of optimal security portfolio 
Estimation of risk in effectiveness problems 


Mathematical 
methods in 
technology of 
management by risk 


LP-calculus and combinatorics, discrete 
mathematics and Weyl’s theorem on numbers, 
the theory by Markowitz and VaR, Bayes 
approach, LP-methods by Ryabinin and Mojaev, 
the LP-theory with CIE, the non-linear 
optimizations, modelling by Monte-Carlo, 
algorithmic calculations and use of modern PC 


Definition 
of risk 


Risk is the probability of non-success 
and damage 


Estimation of 

quality of the risk model 


Errors in classification of objects, robustness 
in classification 


Type of 

distribution 

of random variables 


Discrete non-parametric distribution, given as 
per table. Discrete multi-dimensional 
non-parametric distribution. 


Dependence 
of variables 


Combinatorics. Perfect Disjunctive 
Normal Form (PDNF), CIE 


Type of 
calculations 


Algorithmic iterative calculations 
on modern PC 


Construction 
of the risk model 


1) Scenario of risk, graph-model of risk, logic function 
of risk, orthogonal L-function, P-function of risk; 

2) Summary distribution of the 

security portfolio yield based on PDNF and CIE 


Solution of 
non-linear 
problems of 
optimization 


1) Identification of the risk LP-model on 
statistical data with the use of Bayes formula; 

2) Optimization of the security portfolio by LP-VaR\ 

3) Analysis of the complex random process 
in the efficiency problem 


Analysis 
of risks 


Statistical analysis. Combinatorial analysis, 
Logic-and-probabilistic analysis 


Management 
of risks 


Active management of non-success 
risk taking into account contributions 
of initiating grade-events and sign-events. 
Passive management on bases of insurance 


Areas of 
applications 


Scenario logic-and-probabilistic management 
of risk in structure complex systems 
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management, selection of structure of the optimal security portfolio, de- 
termination of weights of random influencing parameters on the main 
parameter. 

In the technology of the scenario LP-management of the non-success 
risk in problems of classification, investment and effectiveness, various 
mathematical methods and technologies of risk management are used: 
LP-calculus, discrete mathematics and the theorem of Weyl on numbers, 
Bayes’ approach and Shannon’s entropy, the theories by Markowitz and 
VaR for security portfolio, the LP-methods by Ryabinin and Mojaev, 
the risk LP-theory with GIE, non-linear optimizations and algorithmic 
calculations, modelling by Monte-Carlo on modern PC. 

In models of the scenario LP-management of risk, the discrete non- 
parametrical distributions of random values and the total distribution 
of the final event are only used. These distributions are set by table. 
This allows us make calculations with many-dimensional distributions, 
in which any components has arbitrary distribution law which is not 
normal, and also with distributions having “fat tails” , The tabular way 
of defining distributions allows us to overcome the essential assumptions 
in the portfolio theory with the normal distribution law for each security 
yield and the security portfolio yield as a whole, to solve new problems 
of analysis and forecasting of risk of the security portfolio. 

In models of the scenario LP-management of non-success risk, the 
dependence of logic variables is taken into account on basis of combina- 
torics (each with each), usage of Perfect Disjunctive Normal Form and 
GIE. The concepts of the correlation theory are not used. 

In technology of the scenario LP-management of non-success risk 
in problems of classification, investment and effectiveness, the calcula- 
tions are algorithmic; they should be carried out on modern computers 
because of their high complexity. The exponential complexity of cal- 
culations is overcome by application of algorithms based on orthogonal 
properties of GIE, PDNF and on Monte-Carlo method. 

The non-success risk LP-model is constructed in the following se- 
quence: scenario of non-success, structural risk model or risk graph- 
model, risk L-function, orthogonalization of the risk L-function, risk P- 
function (polynomial), identification of the risk P-model from statistical 
data. For the structure optimization problem of the security portfolio it 
is also necessary to build the total yield distribution of security portfolio, 
using combinatorics, GIE, PDNF and Weil’s theorem. 
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In the technology of the scenario LP-management of non-success risk, 
one solves the nonlinear optimization problem by algorithmic methods. 
This problem involves identification of the risk LP-model on statistical 
data based on the modified Bayes formula or structure optimization of 
the security portfolio with use of LP-VaR and the admitted yield. 

The non-success risk LP-model with the GIE allow one to carry out 
statistical, combinatorial and LP-analysis of risks in technology of the 
scenario LP-management of non-success risk by calculating the contribu- 
tions of the sign-events and grade-events to risk, which makes it possible 
to carry out active scenario-based control of non-success risks instead of 
the passive insurance-based control. 

In the scenario LP-management of non-success risk, the active man- 
agement is carried out, proceeding from the contributions of initiating 
events. Such approach, tools and organization are considered for the 
scenario risk LP-management at stages of design, tests and operation of 
systems. 

Areas of application of the scenario LP-management of non-success 
risk are structurally complex technical, economic and organizational sys- 
tems. 

Similarity of the scenario LP-management of non-success 
risk with other methods of classification and risk. The features of 
the scenario LP-management of non-success risk were considered earlier. 
Now we draw attention to the fact that the non-success risk LP-theory 
with GIE includes the following elements of well-known methods of ob- 
jects classification and risk estimation: 

• Similar to the classification theory, the risk LP-theory uses the sepa- 
rating surface or, more precisely, the admitted risk, which divides the 
objects into bad and good; 

• Similar to the neuron networks, the risk LP-theory makes use of poly- 
nomial and thresholds or, more precisely, P-polynomial and the ad- 
mitted risk; 

• Similar to the artificial intelligence methods, the risk LP-theory uses 
logic expressions or, more precisely, the normal disjunctive logic func- 
tions of risk; 

• Similar to mechanics, where for solution of problems of analysis of 
motion and stability we pass from the continuous representation of 
functions to the discrete frequency one, in the risk LP-theory for so- 
lution of problems of effectiveness we also pass from the continuous 
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distribution of random parameters to the discrete frequency distribu- 
tion ones; 

• Similar to the multi-valued logic, the risk LP-theory uses logic vari- 
ables, having several linearly unordered grades which are considered 
as group of incompatible events; 

• Similar to the Markowitz theory of investment risks and VaR, the 
risk LP-theory estimates risk for a set of objects, but this is a rigorous 
mathematical risk, rather than the variance of a random variable which 
estimates the risk only for the normal distribution; 

• Similar to the theory of investment and effectiveness, the risk LP- 
theory uses ideas of Risk and admitted value of effectiveness parameter 
Yad, but it uses the number of dangerous conditions Nad too; 

• Similar to identification, training of the risk LP-model is reduced to 
solving on optimization problem which, to be precise, has an inte- 
ger target function, many unknown continuous parameters, and local 
extremum; 

• Similar to the LP-methods in engineering, the risk LP-theory makes 
use of the failure risk scenario in the form of a structural risk model 
which is, to be precise, associative and can be considered only as a hy- 
pothesis. Besides the initial sign-events have not two conditions but 
from 2 to 60 conditions (incompatible events). At that the probabili- 
ties of sign-events and grade-events are often unknown and one should 
determine them by the identification method on statistical data; 

• Similar to the probability theory, the risk LP-theory makes use of mul- 
tidimensional distribution of random variables, but these are discrete 
non-parametrical distributions of the grade-events defined in a tabular 
form; 

• Similar to the mathematical analysis, the risk LP-model is investigated 
by calculating the derivative or, more precisely, the logic differences 
for the object risk or the mean risk and the target function for an 
assembly of objects. 

The application review of the scenario LP -management of 

non- success risk. The application area of the scenario LP-management 

of non-success risk has not completely defined yet. There are only par- 
ticular examples of applications yet. 
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Let us present a list of application of the risk LP-theory for risk esti- 
mation and analysis, following the works submitted to the First, Second 
and Third International Scientific Schools “Modelling and analysis of 
safety and risk in complex systems” (June 18-22 2001, July 2-5 2002, 
and August 20-23 2003 in St. Petersburg, IPME, RAS), [115-118] and 
the papers [2,4,7,14,15,42,54,69]. In the area of economy and finance, 
there are the following applications of the risk LP-theory; 

• Credit risks; 

• Analysis of bank credit activity; 

• Security portfolio risk; 

• Risk in problems of efBciency; 

• Modelling of bribes; 

• Swindle risk of managers; 

• Fi'aud risk with investments; 

• Management of state and development of the company (bank) by risk 
criterion; 

• Non-success risk in struggle of companies for profitable orders; 

• Non-success risk at financing building projects with reservation; 

• Estimation and management of bank personnel; 

• Risk of rent business; 

• Risk of loss of quality and market; 

• Risk of insurance; 

• Risk analysis in money and commodity markets (Technical Analysis). 

In the area of engineering and ecology, there are the following appli- 
cations of the risk LP-theory: 

• Risk of explosion in a submarine; 

• Risk estimation of car accidents on the crossroads without traffic 
lights; 

• Non-success risk of debugging and operational tests of complex ob- 
jects; 

• Risk of the man injury by electrical current in a room; 
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• Safety on the railway; 

• Explosion risk of a artillery warehouse; 

• Accident risk in an intrinsically dangerous room; 

• Drowning risk for a submarine; 

• Risk analysis of the ship power station; 

• Explosion and fire safety of gas and oil transmitting stations; 

• Risk modelling of three-channel system of nuclear station safety; 

• Economic safety of a defense enterprize; 

• Operation safety of the ground-based space structure; 

• Risk insurance at realization of space activity; 

• Analysis of technogenic safety; 

• Safety estimation of the divergence of trajectory of ships; 

• Risk monitoring in functioning systems of the rocket starting complex; 

• Risk modelling and estimation on nuclear-dangerous plants; 

• Risk modelling and analysis in power systems; 

• Safety management of the nuclear reactor; 

• Risk of resource prolongation of worn power equipments. 

The applications list of the non-success risk LP-theory confirms that 
the risk LP-theory is attractive for engineers and economists. The ex- 
amples of use of the non-success risk LP-models in business showed the 
efficiency of LP-models in sense of accuracy and robustness, opportu- 
nities of risk analysis and risk management. The examples of the use 
of the non-success risk LP-theory in engineering showed the high effi- 
ciency concerning opportunities of estimation of failure risk or accident 
and revealing weaker elements in the system, for which it is necessaiy 
to increase reliability by allocating resources in the first place. 

Comparison of features and similarities of the non-success risk LP- 
theory with other methods of risk estimations and object classifications 
and also the above review of applications of this theory in economy, 
engineering and business allow us to speak about creation of the new 
scientific direction in the theory and practice of risks. We name the 
direction the scenario logic and probabilistic management of the non- 
success risk in complex systems. 
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